------------[ cut here ]------------
WARNING: CPU: 1 PID: 13189 at mm/gup.c:229 __lse_atomic_add arch/arm64/include/asm/atomic_lse.h:27 [inline]
WARNING: CPU: 1 PID: 13189 at mm/gup.c:229 arch_atomic_add arch/arm64/include/asm/atomic.h:28 [inline]
WARNING: CPU: 1 PID: 13189 at mm/gup.c:229 raw_atomic_add include/linux/atomic/atomic-arch-fallback.h:537 [inline]
WARNING: CPU: 1 PID: 13189 at mm/gup.c:229 atomic_add include/linux/atomic/atomic-instrumented.h:105 [inline]
WARNING: CPU: 1 PID: 13189 at mm/gup.c:229 try_grab_page+0x108/0x160 mm/gup.c:252
Modules linked in:
CPU: 1 PID: 13189 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0
Hardware name: linux,dummy-virt (DT)
pstate: a0400009 (NzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : try_grab_page+0x108/0x160 mm/gup.c:229
lr : follow_page_pte+0x174/0x3e4 mm/gup.c:651
sp : ffff80008a6cb640
x29: ffff80008a6cb640 x28: 0000000000200000 x27: ffff00002a483800
x26: 0120000042835fc3 x25: 0000000000000000 x24: 0000000000000002
x23: ffff80008a6cb798 x22: fffffc00000a0d40 x21: ffff00000732d008
x20: f1ff000029deef00 x19: 0000000000210002 x18: 0000000000000002
x17: 0000000000000000 x16: ffff800081ccc7c0 x15: 0000ffff8fee9fff
x14: 0000000000000000 x13: 1e1fe00000afc1c1 x12: ffff80008a6cb688
x11: f0ff0000057e0e00 x10: f0ff0000057e0e0c x9 : f0ff0000057e0e08
x8 : 0000000020001000 x7 : 0000000020000000 x6 : 0000000000000000
x5 : 0000000000042835 x4 : 0000000020001000 x3 : fffffc00000a0d40
x2 : fffffc00000a0d40 x1 : 0000000000210002 x0 : 00000000fffffff7
Call trace:
 __lse_atomic_add arch/arm64/include/asm/atomic_lse.h:27 [inline]
 arch_atomic_add arch/arm64/include/asm/atomic.h:28 [inline]
 raw_atomic_add include/linux/atomic/atomic-arch-fallback.h:537 [inline]
 atomic_add include/linux/atomic/atomic-instrumented.h:105 [inline]
 try_grab_page+0x108/0x160 mm/gup.c:252
 follow_pmd_mask mm/gup.c:734 [inline]
 follow_pud_mask mm/gup.c:765 [inline]
 follow_p4d_mask mm/gup.c:782 [inline]
 follow_page_mask+0x12c/0x2e4 mm/gup.c:839
 __get_user_pages+0x174/0x30c mm/gup.c:1217
 __get_user_pages_locked mm/gup.c:1448 [inline]
 __gup_longterm_locked+0x94/0x8f4 mm/gup.c:2142
 internal_get_user_pages_fast+0x970/0xb60 mm/gup.c:3140
 get_user_pages_fast+0x4c/0x60 mm/gup.c:3218
 __iov_iter_get_pages_alloc+0xc0/0x4c4 lib/iov_iter.c:1111
 iov_iter_get_pages2+0x20/0x40 lib/iov_iter.c:1151
 sk_msg_zerocopy_from_iter+0x78/0x1b8 net/core/skmsg.c:328
 tls_sw_sendmsg_locked net/tls/tls_sw.c:1058 [inline]
 tls_sw_sendmsg+0x640/0x8dc net/tls/tls_sw.c:1204
 inet6_sendmsg+0x44/0x70 net/ipv6/af_inet6.c:651
 sock_sendmsg_nosec net/socket.c:725 [inline]
 sock_sendmsg+0x54/0x60 net/socket.c:748
 __sys_sendto+0x124/0x150 net/socket.c:2134
 __do_sys_sendto net/socket.c:2146 [inline]
 __se_sys_sendto net/socket.c:2142 [inline]
 __arm64_sys_sendto+0x28/0x38 net/socket.c:2142
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52
 el0_svc_common.constprop.0+0x44/0xe4 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x38/0xa4 arch/arm64/kernel/syscall.c:191
 el0_svc+0x2c/0xb0 arch/arm64/kernel/entry-common.c:647
 el0t_64_sync_handler+0xc0/0xc4 arch/arm64/kernel/entry-common.c:665
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---