[ 437.607910][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.670895][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.729168][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.794519][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.651287][ T56] hsr_slave_0: left promiscuous mode [ 438.658886][ T56] hsr_slave_1: left promiscuous mode [ 438.666248][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.673727][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.686290][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.694301][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.704417][ T56] bridge_slave_1: left allmulticast mode [ 438.710886][ T56] bridge_slave_1: left promiscuous mode [ 438.719031][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.730254][ T56] bridge_slave_0: left allmulticast mode [ 438.736092][ T56] bridge_slave_0: left promiscuous mode [ 438.742366][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.758128][ T56] veth1_macvtap: left promiscuous mode [ 438.764106][ T56] veth0_macvtap: left promiscuous mode [ 438.770278][ T56] veth1_vlan: left promiscuous mode [ 438.775917][ T56] veth0_vlan: left promiscuous mode [ 439.000673][ T56] team0 (unregistering): Port device team_slave_1 removed [ 439.017651][ T56] team0 (unregistering): Port device team_slave_0 removed [ 439.032872][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.051410][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.141762][ T56] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 441.919790][T31274] ------------[ cut here ]------------ [ 441.925738][T31274] get_vaddr_frames() cannot follow VM_IO mapping [ 441.926391][T31274] WARNING: CPU: 0 PID: 31274 at drivers/media/common/videobuf2/frame_vector.c:63 get_vaddr_frames+0x22a/0x240 [ 441.944699][T31274] Modules linked in: [ 441.948633][T31274] CPU: 0 PID: 31274 Comm: syz-executor246 Not tainted 6.3.0-rc6-next-20230413-syzkaller-11449-ge3342532ecd3 #0 [ 441.960621][T31274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 441.970787][T31274] RIP: 0010:get_vaddr_frames+0x22a/0x240 [ 441.976691][T31274] Code: d3 17 fb e9 06 ff ff ff e8 73 d3 17 fb e9 cd fe ff ff e8 c9 10 c5 fa 48 c7 c7 60 57 1e 8b c6 05 02 f6 a4 07 01 e8 f6 1b 8d fa <0f> 0b e9 53 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 441.996525][T31274] RSP: 0018:ffffc900054f7778 EFLAGS: 00010282 [ 442.002640][T31274] RAX: 0000000000000000 RBX: ffff88806d828000 RCX: 0000000000000000 [ 442.010689][T31274] RDX: ffff888022de3a80 RSI: ffffffff814b86a7 RDI: 0000000000000001 [ 442.018851][T31274] RBP: ffff88806d828004 R08: 0000000000000001 R09: 0000000000000000 [ 442.027000][T31274] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2 [ 442.035061][T31274] R13: 0000000000000000 R14: 0000000000400000 R15: ffff88806fc3d000 [ 442.043065][T31274] FS: 0000555556292300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 442.052078][T31274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.058768][T31274] CR2: 00000000200000c0 CR3: 0000000020de8000 CR4: 00000000003506f0 [ 442.066928][T31274] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 442.075164][T31274] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 442.083351][T31274] Call Trace: [ 442.086709][T31274] [ 442.089664][T31274] vb2_create_framevec+0x62/0xd0 [ 442.095156][T31274] vb2_vmalloc_get_userptr+0x13b/0x530 [ 442.101007][T31274] ? kernel_text_address+0x3d/0x80 [ 442.106293][T31274] ? __kernel_text_address+0xd/0x30 [ 442.111629][T31274] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430 [ 442.117988][T31274] __prepare_userptr+0x6a6/0x1630 [ 442.123251][T31274] ? vb2_queue_error+0x60/0x60 [ 442.128123][T31274] ? __kmem_cache_free+0xaf/0x2d0 [ 442.133233][T31274] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 442.139420][T31274] ? ____kasan_slab_free+0x160/0x1c0 [ 442.144831][T31274] ? slab_free_freelist_hook+0x8b/0x1c0 [ 442.150432][T31274] ? __kmem_cache_free+0xaf/0x2d0 [ 442.155631][T31274] ? tomoyo_path_number_perm+0x43b/0x570 [ 442.161444][T31274] ? security_file_ioctl+0x54/0xb0 [ 442.166748][T31274] ? __x64_sys_ioctl+0xb7/0x210 [ 442.171657][T31274] ? print_usage_bug.part.0+0x660/0x660 [ 442.177349][T31274] ? mark_lock.part.0+0xee/0x1970 [ 442.182438][T31274] ? lock_sync+0x190/0x190 [ 442.186952][T31274] ? rcu_is_watching+0x12/0xb0 [ 442.191819][T31274] __buf_prepare+0x602/0x7d0 [ 442.196533][T31274] ? vb2_queue_or_prepare_buf+0x640/0x2cb0 [ 442.202512][T31274] vb2_core_qbuf+0xc79/0x14e0 [ 442.207303][T31274] vb2_qbuf+0x13d/0x1d0 [ 442.211509][T31274] ? vb2_ioctl_prepare_buf+0x140/0x140 [ 442.217439][T31274] ? lock_downgrade+0x690/0x690 [ 442.222373][T31274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.228425][T31274] vb2_ioctl_qbuf+0xff/0x140 [ 442.233065][T31274] v4l_qbuf+0x96/0xc0 [ 442.237202][T31274] __video_do_ioctl+0xba6/0xf20 [ 442.242154][T31274] ? v4l_reqbufs+0xd0/0xd0 [ 442.246688][T31274] ? __might_fault+0xb2/0x190 [ 442.251733][T31274] video_usercopy+0x4bf/0x14c0 [ 442.256739][T31274] ? v4l_reqbufs+0xd0/0xd0 [ 442.261221][T31274] ? v4l_enumstd+0x70/0x70 [ 442.265794][T31274] ? __x64_sys_openat+0x143/0x1f0 [ 442.270963][T31274] v4l2_ioctl+0x1b7/0x250 [ 442.275474][T31274] ? v4l2_read+0x350/0x350 [ 442.279964][T31274] __x64_sys_ioctl+0x197/0x210 [ 442.284925][T31274] do_syscall_64+0x39/0xb0 [ 442.289480][T31274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 442.295738][T31274] RIP: 0033:0x7f3495d806f9 [ 442.300384][T31274] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 442.321006][T31274] RSP: 002b:00007ffcbc66c708 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.329721][T31274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3495d806f9 [ 442.337992][T31274] RDX: 0000000020000140 RSI: 00000000c058560f RDI: 0000000000000003 [ 442.346056][T31274] RBP: 00007f3495d40200 R08: 0000000000000000 R09: 0000000000000000 [ 442.354249][T31274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3495d40290 [ 442.362429][T31274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.370527][T31274] [ 442.373582][T31274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.380889][T31274] CPU: 0 PID: 31274 Comm: syz-executor246 Not tainted 6.3.0-rc6-next-20230413-syzkaller-11449-ge3342532ecd3 #0 [ 442.392806][T31274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 442.403049][T31274] Call Trace: [ 442.406448][T31274] [ 442.409575][T31274] dump_stack_lvl+0xd9/0x150 [ 442.414406][T31274] panic+0x688/0x730 [ 442.418625][T31274] ? panic_smp_self_stop+0x90/0x90 [ 442.423772][T31274] ? show_trace_log_lvl+0x285/0x390 [ 442.429083][T31274] ? get_vaddr_frames+0x22a/0x240 [ 442.434358][T31274] check_panic_on_warn+0xb1/0xc0 [ 442.439437][T31274] __warn+0xf2/0x390 [ 442.443463][T31274] ? __wake_up_klogd.part.0+0x99/0xf0 [ 442.448967][T31274] ? get_vaddr_frames+0x22a/0x240 [ 442.454112][T31274] report_bug+0x2da/0x500 [ 442.458646][T31274] handle_bug+0x3c/0x70 [ 442.462842][T31274] exc_invalid_op+0x18/0x50 [ 442.467389][T31274] asm_exc_invalid_op+0x1a/0x20 [ 442.472490][T31274] RIP: 0010:get_vaddr_frames+0x22a/0x240 [ 442.478344][T31274] Code: d3 17 fb e9 06 ff ff ff e8 73 d3 17 fb e9 cd fe ff ff e8 c9 10 c5 fa 48 c7 c7 60 57 1e 8b c6 05 02 f6 a4 07 01 e8 f6 1b 8d fa <0f> 0b e9 53 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 442.498496][T31274] RSP: 0018:ffffc900054f7778 EFLAGS: 00010282 [ 442.504575][T31274] RAX: 0000000000000000 RBX: ffff88806d828000 RCX: 0000000000000000 [ 442.512644][T31274] RDX: ffff888022de3a80 RSI: ffffffff814b86a7 RDI: 0000000000000001 [ 442.520624][T31274] RBP: ffff88806d828004 R08: 0000000000000001 R09: 0000000000000000 [ 442.528690][T31274] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff2 [ 442.536670][T31274] R13: 0000000000000000 R14: 0000000000400000 R15: ffff88806fc3d000 [ 442.544779][T31274] ? __warn_printk+0x187/0x310 [ 442.549574][T31274] ? get_vaddr_frames+0x22a/0x240 [ 442.554627][T31274] vb2_create_framevec+0x62/0xd0 [ 442.559852][T31274] vb2_vmalloc_get_userptr+0x13b/0x530 [ 442.565518][T31274] ? kernel_text_address+0x3d/0x80 [ 442.570727][T31274] ? __kernel_text_address+0xd/0x30 [ 442.575935][T31274] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430 [ 442.582134][T31274] __prepare_userptr+0x6a6/0x1630 [ 442.587182][T31274] ? vb2_queue_error+0x60/0x60 [ 442.591989][T31274] ? __kmem_cache_free+0xaf/0x2d0 [ 442.597057][T31274] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 442.603431][T31274] ? ____kasan_slab_free+0x160/0x1c0 [ 442.608839][T31274] ? slab_free_freelist_hook+0x8b/0x1c0 [ 442.614935][T31274] ? __kmem_cache_free+0xaf/0x2d0 [ 442.619982][T31274] ? tomoyo_path_number_perm+0x43b/0x570 [ 442.625723][T31274] ? security_file_ioctl+0x54/0xb0 [ 442.630843][T31274] ? __x64_sys_ioctl+0xb7/0x210 [ 442.635801][T31274] ? print_usage_bug.part.0+0x660/0x660 [ 442.641454][T31274] ? mark_lock.part.0+0xee/0x1970 [ 442.646851][T31274] ? lock_sync+0x190/0x190 [ 442.651286][T31274] ? rcu_is_watching+0x12/0xb0 [ 442.656076][T31274] __buf_prepare+0x602/0x7d0 [ 442.660792][T31274] ? vb2_queue_or_prepare_buf+0x640/0x2cb0 [ 442.667144][T31274] vb2_core_qbuf+0xc79/0x14e0 [ 442.671932][T31274] vb2_qbuf+0x13d/0x1d0 [ 442.676103][T31274] ? vb2_ioctl_prepare_buf+0x140/0x140 [ 442.681593][T31274] ? lock_downgrade+0x690/0x690 [ 442.686542][T31274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.692456][T31274] vb2_ioctl_qbuf+0xff/0x140 [ 442.697072][T31274] v4l_qbuf+0x96/0xc0 [ 442.701531][T31274] __video_do_ioctl+0xba6/0xf20 [ 442.706711][T31274] ? v4l_reqbufs+0xd0/0xd0 [ 442.711167][T31274] ? __might_fault+0xb2/0x190 [ 442.716238][T31274] video_usercopy+0x4bf/0x14c0 [ 442.721145][T31274] ? v4l_reqbufs+0xd0/0xd0 [ 442.726475][T31274] ? v4l_enumstd+0x70/0x70 [ 442.731539][T31274] ? __x64_sys_openat+0x143/0x1f0 [ 442.738327][T31274] v4l2_ioctl+0x1b7/0x250 [ 442.743460][T31274] ? v4l2_read+0x350/0x350 [ 442.747974][T31274] __x64_sys_ioctl+0x197/0x210 [ 442.754151][T31274] do_syscall_64+0x39/0xb0 [ 442.758935][T31274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 442.765873][T31274] RIP: 0033:0x7f3495d806f9 [ 442.770667][T31274] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 442.791149][T31274] RSP: 002b:00007ffcbc66c708 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.799602][T31274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3495d806f9 [ 442.808126][T31274] RDX: 0000000020000140 RSI: 00000000c058560f RDI: 0000000000000003 [ 442.816539][T31274] RBP: 00007f3495d40200 R08: 0000000000000000 R09: 0000000000000000 [ 442.824518][T31274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3495d40290 [ 442.832683][T31274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.841036][T31274] [ 442.844115][T31274] Kernel Offset: disabled [ 442.848549][T31274] Rebooting in 86400 seconds..