------------[ cut here ]------------ get_vaddr_frames() cannot follow VM_IO mapping WARNING: CPU: 0 PID: 10315 at drivers/media/common/videobuf2/frame_vector.c:59 get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 Modules linked in: CPU: 0 PID: 10315 Comm: syz-executor.5 Not tainted 5.15.120-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 lr : get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 sp : ffff80001d7d7340 x29: ffff80001d7d7340 x28: ffff0000d4f99060 x27: 0000000000000000 x26: dfff800000000000 x25: ffff80001d7d76b8 x24: 1fffe00019c07000 x23: dfff800000000000 x22: 1fffe00019c07000 x21: ffff0000ce038004 x20: 00000000fffffff2 x19: ffff800016cf0000 x18: 0000000000000001 x17: ff80800008335ea8 x16: ffff80001195b9f4 x15: ffff800008335ea8 x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000040000 x11: 00000000000059b3 x10: ffff80001dc39000 x9 : 519efcccbe829c00 x8 : 519efcccbe829c00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001d7d6ab8 x4 : ffff8000149cfca0 x3 : ffff80000854e3cc x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002e Call trace: get_vaddr_frames+0x1d8/0x21c drivers/media/common/videobuf2/frame_vector.c:59 vb2_create_framevec+0x54/0xd0 drivers/media/common/videobuf2/videobuf2-memops.c:50 vb2_vmalloc_get_userptr+0xe8/0x404 drivers/media/common/videobuf2/videobuf2-vmalloc.c:88 __prepare_userptr drivers/media/common/videobuf2/videobuf2-core.c:1164 [inline] __buf_prepare+0x9b0/0x3734 drivers/media/common/videobuf2/videobuf2-core.c:1406 vb2_core_prepare_buf+0xe4/0x308 drivers/media/common/videobuf2/videobuf2-core.c:1535 vb2_prepare_buf drivers/media/common/videobuf2/videobuf2-v4l2.c:744 [inline] vb2_ioctl_prepare_buf+0x1c8/0x228 drivers/media/common/videobuf2/videobuf2-v4l2.c:1045 v4l_prepare_buf+0xac/0xd8 drivers/media/v4l2-core/v4l2-ioctl.c:2087 __video_do_ioctl+0x7f0/0xb64 drivers/media/v4l2-core/v4l2-ioctl.c:2976 video_usercopy+0x988/0x1160 drivers/media/v4l2-core/v4l2-ioctl.c:3324 video_ioctl2+0x3c/0x50 drivers/media/v4l2-core/v4l2-ioctl.c:3372 v4l2_ioctl+0x148/0x18c drivers/media/v4l2-core/v4l2-dev.c:364 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:860 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:596 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:614 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 irq event stamp: 192 hardirqs last enabled at (191): [] __up_console_sem+0xb4/0x100 kernel/printk/printk.c:257 hardirqs last disabled at (192): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:387 softirqs last enabled at (136): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:31 softirqs last disabled at (134): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:18 ---[ end trace ab14ed7ba13020a4 ]---