------------[ cut here ]------------
get_vaddr_frames() cannot follow VM_IO mapping
WARNING: CPU: 1 PID: 5126 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59
Modules linked in:
CPU: 1 PID: 5126 Comm: syz-executor.3 Not tainted 5.15.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59
lr : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59
sp : ffff80001ccb7340
x29: ffff80001ccb7340 x28: ffff0000dc6fa860 x27: 0000000000000000
x26: dfff800000000000 x25: ffff80001ccb76b8 x24: 1fffe0001a537800
x23: dfff800000000000 x22: 1fffe0001a537800 x21: ffff0000d29bc004
x20: 00000000fffffff2 x19: ffff800016cf0000 x18: 1fffe0003690338e
x17: 1fffe0003690338e x16: ffff80001195eeac x15: ffff80001498f100
x14: 1ffff0000291e06a x13: ffffffffffffffff x12: 0000000000040000
x11: 00000000000041c6 x10: ffff80001dccc000 x9 : a9fb135ce1591200
x8 : a9fb135ce1591200 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a956040
x2 : ffff0001b4819d10 x1 : 0000000100000000 x0 : 000000000000002e
Call trace:
 get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59
 vb2_create_framevec+0x54/0xd0 drivers/media/common/videobuf2/videobuf2-memops.c:50
 vb2_vmalloc_get_userptr+0xe8/0x404 drivers/media/common/videobuf2/videobuf2-vmalloc.c:88
 __prepare_userptr drivers/media/common/videobuf2/videobuf2-core.c:1164 [inline]
 __buf_prepare+0x9b0/0x3734 drivers/media/common/videobuf2/videobuf2-core.c:1406
 vb2_core_prepare_buf+0xe4/0x308 drivers/media/common/videobuf2/videobuf2-core.c:1535
 vb2_prepare_buf drivers/media/common/videobuf2/videobuf2-v4l2.c:744 [inline]
 vb2_ioctl_prepare_buf+0x1c8/0x228 drivers/media/common/videobuf2/videobuf2-v4l2.c:1045
 v4l_prepare_buf+0xac/0xd8 drivers/media/v4l2-core/v4l2-ioctl.c:2087
 __video_do_ioctl+0x7f0/0xb64 drivers/media/v4l2-core/v4l2-ioctl.c:2976
 video_usercopy+0x988/0x1160 drivers/media/v4l2-core/v4l2-ioctl.c:3324
 video_ioctl2+0x3c/0x50 drivers/media/v4l2-core/v4l2-ioctl.c:3372
 v4l2_ioctl+0x148/0x18c drivers/media/v4l2-core/v4l2-dev.c:364
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:874 [inline]
 __se_sys_ioctl fs/ioctl.c:860 [inline]
 __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 244
hardirqs last  enabled at (243): [<ffff800008268d0c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1338 [inline]
hardirqs last  enabled at (243): [<ffff800008268d0c>] finish_lock_switch+0xbc/0x1e8 kernel/sched/core.c:4780
hardirqs last disabled at (244): [<ffff80001195a540>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387
softirqs last  enabled at (240): [<ffff800008020ccc>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (240): [<ffff800008020ccc>] __do_softirq+0xb5c/0xe20 kernel/softirq.c:587
softirqs last disabled at (225): [<ffff8000081b573c>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (225): [<ffff8000081b573c>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (225): [<ffff8000081b573c>] __irq_exit_rcu+0x28c/0x534 kernel/softirq.c:636
---[ end trace 2c4d4dd7a8ea55ba ]---