------------[ cut here ]------------ get_vaddr_frames() cannot follow VM_IO mapping WARNING: CPU: 0 PID: 17240 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 Modules linked in: CPU: 0 PID: 17240 Comm: syz-executor.3 Not tainted 5.15.120-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 lr : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 sp : ffff80001ed97340 x29: ffff80001ed97340 x28: ffff0000d7a3f060 x27: 0000000000000000 x26: dfff800000000000 x25: ffff80001ed976b8 x24: 1fffe0001b6ac800 x23: dfff800000000000 x22: 1fffe0001b6ac800 x21: ffff0000db564004 x20: 00000000fffffff2 x19: ffff800016cf0000 x18: 0000000000000001 x17: ff80800008335ea8 x16: ffff80001195b9f4 x15: ffff800008335ea8 x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000040000 x11: 0000000000005b0d x10: ffff80001f9b9000 x9 : 18e4ae2cf55fbc00 x8 : 18e4ae2cf55fbc00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001ed96ab8 x4 : ffff8000149cfca0 x3 : ffff80000854e3cc x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002e Call trace: get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 vb2_create_framevec+0x54/0xd0 drivers/media/common/videobuf2/videobuf2-memops.c:50 vb2_vmalloc_get_userptr+0xe8/0x404 drivers/media/common/videobuf2/videobuf2-vmalloc.c:88 __prepare_userptr drivers/media/common/videobuf2/videobuf2-core.c:1164 [inline] __buf_prepare+0x9b0/0x3734 drivers/media/common/videobuf2/videobuf2-core.c:1406 vb2_core_prepare_buf+0xe4/0x308 drivers/media/common/videobuf2/videobuf2-core.c:1535 vb2_prepare_buf drivers/media/common/videobuf2/videobuf2-v4l2.c:744 [inline] vb2_ioctl_prepare_buf+0x1c8/0x228 drivers/media/common/videobuf2/videobuf2-v4l2.c:1045 v4l_prepare_buf+0xac/0xd8 drivers/media/v4l2-core/v4l2-ioctl.c:2087 __video_do_ioctl+0x7f0/0xb64 drivers/media/v4l2-core/v4l2-ioctl.c:2976 video_usercopy+0x988/0x1160 drivers/media/v4l2-core/v4l2-ioctl.c:3324 video_ioctl2+0x3c/0x50 drivers/media/v4l2-core/v4l2-ioctl.c:3372 v4l2_ioctl+0x148/0x18c drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 272 hardirqs last enabled at (271): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (272): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387 softirqs last enabled at (220): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (218): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace 455106af757fe305 ]---