------------[ cut here ]------------ get_vaddr_frames() cannot follow VM_IO mapping WARNING: CPU: 0 PID: 3962 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 Modules linked in: CPU: 0 PID: 3962 Comm: syz-executor254 Not tainted 5.15.118-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 lr : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 sp : ffff80001a2671e0 x29: ffff80001a2671e0 x28: ffff0000c91e0860 x27: 0000000000000000 x26: dfff800000000000 x25: ffff80001a267558 x24: 1ffff00003bc3200 x23: dfff800000000000 x22: 1ffff00003bc3200 x21: ffff80001de19004 x20: 00000000fffffff2 x19: ffff800016cf0000 x18: 0000000000000001 x17: ff80800008335ea8 x16: ffff8000119547c4 x15: ffff800008335ea8 x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000 x11: ff8080000832d950 x10: 0000000000000000 x9 : eba1a83edf13b500 x8 : eba1a83edf13b500 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001a266958 x4 : ffff8000149cfca0 x3 : ffff80000854dcf8 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002e Call trace: get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 vb2_create_framevec+0x54/0xd0 drivers/media/common/videobuf2/videobuf2-memops.c:50 vb2_vmalloc_get_userptr+0xe8/0x404 drivers/media/common/videobuf2/videobuf2-vmalloc.c:88 __prepare_userptr drivers/media/common/videobuf2/videobuf2-core.c:1164 [inline] __buf_prepare+0x9b0/0x3734 drivers/media/common/videobuf2/videobuf2-core.c:1406 vb2_core_qbuf+0x230/0x10c4 drivers/media/common/videobuf2/videobuf2-core.c:1698 vb2_qbuf+0x14c/0x204 drivers/media/common/videobuf2/videobuf2-v4l2.c:820 v4l2_m2m_qbuf+0x214/0x7b4 drivers/media/v4l2-core/v4l2-mem2mem.c:772 v4l2_m2m_ioctl_qbuf+0x6c/0x80 drivers/media/v4l2-core/v4l2-mem2mem.c:1372 v4l_qbuf+0xac/0xd8 drivers/media/v4l2-core/v4l2-ioctl.c:2047 __video_do_ioctl+0x7f0/0xb64 drivers/media/v4l2-core/v4l2-ioctl.c:2976 video_usercopy+0x988/0x1160 drivers/media/v4l2-core/v4l2-ioctl.c:3324 video_ioctl2+0x3c/0x50 drivers/media/v4l2-core/v4l2-ioctl.c:3372 v4l2_ioctl+0x148/0x18c drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 19474 hardirqs last enabled at (19473): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (19474): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387 softirqs last enabled at (18682): [] softirq_handle_end kernel/softirq.c:401 [inline] softirqs last enabled at (18682): [] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587 softirqs last disabled at (18671): [] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline] softirqs last disabled at (18671): [] invoke_softirq kernel/softirq.c:439 [inline] softirqs last disabled at (18671): [] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636 ---[ end trace 06f132405511ae2e ]---