------------[ cut here ]------------ WARNING: CPU: 0 PID: 14023 at mm/gup.c:1299 __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 Modules linked in: CPU: 0 PID: 14023 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-02320-gacc657692aed #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 lr : __get_user_pages+0x364/0x3b0 mm/gup.c:1297 sp : ffff800083853aa0 x29: ffff800083853aa0 x28: 0000000000000000 x27: 0000000000080101 x26: 0000000000000000 x25: fcff000028d59200 x24: 0000000000000000 x23: 0000000000000001 x22: 0000000000000000 x21: f8ff000006621000 x20: 0000000000000441 x19: 0000000020001700 x18: 0000000000000001 x17: ffff800080026c50 x16: ffff80008059fcb0 x15: 00000000200002c0 x14: 0000ffffac5fffff x13: 0000000000000000 x12: 1e5fe00004a20ca1 x11: 0000000000000000 x10: ffff800081d7f9c8 x9 : f2ff000025106500 x8 : 000000000000000d x7 : 0000000020000000 x6 : 0000000000000001 x5 : 0000000000000000 x4 : fffffc0001f50040 x3 : 0000000000000002 x2 : 0000000000000007 x1 : fffffc0001f50034 x0 : 0000000000000000 Call trace: __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 __get_user_pages_locked mm/gup.c:1509 [inline] __gup_longterm_locked+0x1c8/0xaf4 mm/gup.c:2216 pin_user_pages+0x78/0xa0 mm/gup.c:3389 io_pin_pages+0x78/0x12c io_uring/rsrc.c:1052 io_sqe_buffer_register+0x70/0x420 io_uring/rsrc.c:1088 io_sqe_buffers_register+0x118/0x268 io_uring/rsrc.c:1206 __io_uring_register io_uring/io_uring.c:4475 [inline] __do_sys_io_uring_register io_uring/io_uring.c:4652 [inline] __se_sys_io_uring_register io_uring/io_uring.c:4613 [inline] __arm64_sys_io_uring_register+0xf8/0xdb0 io_uring/io_uring.c:4613 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:51 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:136 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:155 el0_svc+0x34/0xd8 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:595 ---[ end trace 0000000000000000 ]---