[ 48.160267][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.171746][ T1039] device veth1_macvtap left promiscuous mode [ 48.178228][ T1039] device veth0_macvtap left promiscuous mode [ 48.184551][ T1039] device veth1_vlan left promiscuous mode [ 48.190364][ T1039] device veth0_vlan left promiscuous mode [ 48.301644][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 48.315059][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 48.328193][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.341553][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.382777][ T1039] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2023/01/21 06:47:02 ignoring optional flag "sandboxArg"="0" 2023/01/21 06:47:03 parsed 1 programs 2023/01/21 06:47:03 executed programs: 0 [ 64.364288][ T3629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.372862][ T3629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.380979][ T3629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.389199][ T3629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.396607][ T3629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.405500][ T4087] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.477185][ T4087] chnl_net:caif_netlink_parms(): no params data found [ 64.508360][ T4087] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.515521][ T4087] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.523462][ T4087] device bridge_slave_0 entered promiscuous mode [ 64.530988][ T4087] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.538364][ T4087] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.545932][ T4087] device bridge_slave_1 entered promiscuous mode [ 64.562639][ T4087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.574420][ T4087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.592920][ T4087] team0: Port device team_slave_0 added [ 64.599743][ T4087] team0: Port device team_slave_1 added [ 64.614683][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.622001][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.647938][ T4087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.659957][ T4087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.666934][ T4087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.693285][ T4087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.718445][ T4087] device hsr_slave_0 entered promiscuous mode [ 64.725452][ T4087] device hsr_slave_1 entered promiscuous mode [ 65.473145][ T4087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.484377][ T4087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.493675][ T4087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.502691][ T4087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.571373][ T4087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.585429][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.594035][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.604451][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.606536][ T4087] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.610990][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.629096][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.637959][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.647341][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.654453][ T3639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.672280][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.680338][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.690592][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.699069][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.706321][ T3639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.714251][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.722978][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.731709][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.741375][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.757019][ T4087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.769302][ T4087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.782613][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.790275][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.800036][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.808457][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.817104][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.825787][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.835506][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.847729][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.969575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.978500][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.988238][ T4087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.007892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.018143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.037359][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.045836][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.055994][ T4087] device veth0_vlan entered promiscuous mode [ 66.064570][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.073513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.083788][ T4087] device veth1_vlan entered promiscuous mode [ 66.104551][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.113748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.121688][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.131457][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.142657][ T4087] device veth0_macvtap entered promiscuous mode [ 66.151777][ T4087] device veth1_macvtap entered promiscuous mode [ 66.170552][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.178965][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.187753][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.197370][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.206571][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.218415][ T4087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.227863][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.237490][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.247961][ T4087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.256783][ T4087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.266507][ T4087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.276522][ T4087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.329995][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.345907][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.350948][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.358955][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.365221][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.378381][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.414866][ T4173] ------------[ cut here ]------------ [ 66.420601][ T4173] get_vaddr_frames() cannot follow VM_IO mapping [ 66.420734][ T4173] WARNING: CPU: 1 PID: 4173 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1ac/0x1c0 [ 66.440296][ T4173] Modules linked in: [ 66.444770][ T4173] CPU: 1 PID: 4173 Comm: syz-executor.0 Not tainted 6.1.0-rc7-syzkaller #0 [ 66.453659][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 66.464011][ T4173] RIP: 0010:get_vaddr_frames+0x1ac/0x1c0 [ 66.469765][ T4173] Code: ff 89 44 24 04 e8 94 17 c4 fb 8b 44 24 04 e9 e6 fe ff ff 48 c7 c7 80 75 2f 8a 89 44 24 04 c6 05 51 e8 58 07 01 e8 fa cb dc 02 <0f> 0b 8b 44 24 04 e9 41 ff ff ff 66 0f 1f 84 00 00 00 00 00 48 b8 [ 66.490817][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 66.498008][ T4173] RSP: 0018:ffffc9000503f898 EFLAGS: 00010286 [ 66.504718][ T4173] RAX: 0000000000000000 RBX: ffff888073cdf000 RCX: 0000000000000000 [ 66.513022][ T4173] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff52000a07f05 [ 66.521104][ T4173] RBP: ffff888073cdf004 R08: 0000000000000001 R09: ffff8880b9b2896b [ 66.529512][ T4173] R10: ffffed101736512d R11: 0000000000000000 R12: ffff888073cdf000 [ 66.537898][ T4173] R13: 0000000000000001 R14: 0000000000096000 R15: 0000000000000000 [ 66.546219][ T4173] FS: 00007fd1ee5cf700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 66.555434][ T4173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.568861][ T4173] CR2: 000056436efe2048 CR3: 000000007a710000 CR4: 0000000000350ee0 [ 66.577258][ T4173] Call Trace: [ 66.580632][ T4173] [ 66.583894][ T4173] vb2_create_framevec+0x4c/0x90 [ 66.588940][ T4173] vb2_vmalloc_get_userptr+0x116/0x460 [ 66.594740][ T4173] __prepare_userptr+0x736/0x17c0 [ 66.599876][ T4173] ? kasan_save_free_info+0x2e/0x40 [ 66.605747][ T4173] ? vb2_queue_error+0x50/0x50 [ 66.611028][ T4173] ? tomoyo_path_number_perm+0x381/0x4a0 [ 66.618455][ T4173] ? lock_acquire+0x1e3/0x630 [ 66.623653][ T4173] ? lock_release+0x810/0x810 [ 66.628322][ T4173] ? debug_check_no_obj_freed+0x210/0x420 [ 66.635251][ T4173] ? rcu_read_lock_sched_held+0x3e/0x70 [ 66.640790][ T4173] ? trace_contention_end+0x153/0x1e0 [ 66.647879][ T4173] ? __mutex_lock+0x231/0x1360 [ 66.654393][ T4173] ? memset+0x24/0x50 [ 66.658376][ T4173] __buf_prepare+0x4b4/0x650 [ 66.664471][ T4173] vb2_core_prepare_buf+0xb5/0x210 [ 66.669579][ T4173] v4l2_m2m_prepare_buf+0xad/0x170 [ 66.676496][ T4173] __video_do_ioctl+0x97d/0xbe0 [ 66.681351][ T4173] ? v4l_print_control+0x50/0x50 [ 66.686756][ T4173] video_usercopy+0x508/0x1360 [ 66.691524][ T4173] ? v4l_print_control+0x50/0x50 [ 66.698298][ T4173] ? v4l_enumstd+0x60/0x60 [ 66.703076][ T4173] ? __fget_files+0x1bf/0x3a0 [ 66.707767][ T4173] v4l2_ioctl+0x18e/0x210 [ 66.713779][ T4173] __x64_sys_ioctl+0x123/0x190 [ 66.718578][ T4173] do_syscall_64+0x39/0xb0 [ 66.727769][ T4173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.734898][ T4173] RIP: 0033:0x7fd1ed88c0a9 [ 66.739315][ T4173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.760360][ T4173] RSP: 002b:00007fd1ee5cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.769031][ T4173] RAX: ffffffffffffffda RBX: 00007fd1ed9abf80 RCX: 00007fd1ed88c0a9 [ 66.779117][ T4173] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 66.787389][ T4173] RBP: 00007fd1ed8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 66.796815][ T4173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.806275][ T4173] R13: 00007ffe57c9727f R14: 00007fd1ee5cf300 R15: 0000000000022000 [ 66.816539][ T4173] [ 66.819551][ T4173] Kernel panic - not syncing: panic_on_warn set ... [ 66.826117][ T4173] CPU: 0 PID: 4173 Comm: syz-executor.0 Not tainted 6.1.0-rc7-syzkaller #0 [ 66.834679][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 66.844894][ T4173] Call Trace: [ 66.848158][ T4173] [ 66.851086][ T4173] dump_stack_lvl+0x5b/0x81 [ 66.855584][ T4173] panic+0x21d/0x457 [ 66.859472][ T4173] ? panic_print_sys_info.part.0+0x6e/0x6e [ 66.865388][ T4173] ? get_vaddr_frames+0x1ac/0x1c0 [ 66.870488][ T4173] __warn.cold+0x1c1/0x260 [ 66.874893][ T4173] ? get_vaddr_frames+0x1ac/0x1c0 [ 66.879899][ T4173] report_bug+0x15e/0x1c0 [ 66.884227][ T4173] ? vprintk_emit+0x126/0x3d0 [ 66.888892][ T4173] handle_bug+0x3c/0x70 [ 66.893041][ T4173] exc_invalid_op+0x18/0x50 [ 66.897524][ T4173] asm_exc_invalid_op+0x1a/0x20 [ 66.902359][ T4173] RIP: 0010:get_vaddr_frames+0x1ac/0x1c0 [ 66.907972][ T4173] Code: ff 89 44 24 04 e8 94 17 c4 fb 8b 44 24 04 e9 e6 fe ff ff 48 c7 c7 80 75 2f 8a 89 44 24 04 c6 05 51 e8 58 07 01 e8 fa cb dc 02 <0f> 0b 8b 44 24 04 e9 41 ff ff ff 66 0f 1f 84 00 00 00 00 00 48 b8 [ 66.927661][ T4173] RSP: 0018:ffffc9000503f898 EFLAGS: 00010286 [ 66.933752][ T4173] RAX: 0000000000000000 RBX: ffff888073cdf000 RCX: 0000000000000000 [ 66.941722][ T4173] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff52000a07f05 [ 66.949685][ T4173] RBP: ffff888073cdf004 R08: 0000000000000001 R09: ffff8880b9b2896b [ 66.957738][ T4173] R10: ffffed101736512d R11: 0000000000000000 R12: ffff888073cdf000 [ 66.965709][ T4173] R13: 0000000000000001 R14: 0000000000096000 R15: 0000000000000000 [ 66.973691][ T4173] ? get_vaddr_frames+0x1ac/0x1c0 [ 66.978711][ T4173] vb2_create_framevec+0x4c/0x90 [ 66.983849][ T4173] vb2_vmalloc_get_userptr+0x116/0x460 [ 66.989744][ T4173] __prepare_userptr+0x736/0x17c0 [ 66.994866][ T4173] ? kasan_save_free_info+0x2e/0x40 [ 67.000064][ T4173] ? vb2_queue_error+0x50/0x50 [ 67.004828][ T4173] ? tomoyo_path_number_perm+0x381/0x4a0 [ 67.010458][ T4173] ? lock_acquire+0x1e3/0x630 [ 67.015123][ T4173] ? lock_release+0x810/0x810 [ 67.019799][ T4173] ? debug_check_no_obj_freed+0x210/0x420 [ 67.025519][ T4173] ? rcu_read_lock_sched_held+0x3e/0x70 [ 67.031050][ T4173] ? trace_contention_end+0x153/0x1e0 [ 67.036584][ T4173] ? __mutex_lock+0x231/0x1360 [ 67.041347][ T4173] ? memset+0x24/0x50 [ 67.045323][ T4173] __buf_prepare+0x4b4/0x650 [ 67.049911][ T4173] vb2_core_prepare_buf+0xb5/0x210 [ 67.055013][ T4173] v4l2_m2m_prepare_buf+0xad/0x170 [ 67.060108][ T4173] __video_do_ioctl+0x97d/0xbe0 [ 67.065032][ T4173] ? v4l_print_control+0x50/0x50 [ 67.070063][ T4173] video_usercopy+0x508/0x1360 [ 67.074831][ T4173] ? v4l_print_control+0x50/0x50 [ 67.079757][ T4173] ? v4l_enumstd+0x60/0x60 [ 67.084172][ T4173] ? __fget_files+0x1bf/0x3a0 [ 67.088839][ T4173] v4l2_ioctl+0x18e/0x210 [ 67.093157][ T4173] __x64_sys_ioctl+0x123/0x190 [ 67.097917][ T4173] do_syscall_64+0x39/0xb0 [ 67.102334][ T4173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.108230][ T4173] RIP: 0033:0x7fd1ed88c0a9 [ 67.112647][ T4173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.132335][ T4173] RSP: 002b:00007fd1ee5cf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.140749][ T4173] RAX: ffffffffffffffda RBX: 00007fd1ed9abf80 RCX: 00007fd1ed88c0a9 [ 67.148722][ T4173] RDX: 0000000020000300 RSI: 00000000c058565d RDI: 0000000000000003 [ 67.156693][ T4173] RBP: 00007fd1ed8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 67.164662][ T4173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.172634][ T4173] R13: 00007ffe57c9727f R14: 00007fd1ee5cf300 R15: 0000000000022000 [ 67.180613][ T4173] [ 67.184178][ T4173] Kernel Offset: disabled [ 67.188567][ T4173] Rebooting in 86400 seconds..