------------[ cut here ]------------ WARNING: CPU: 1 PID: 5896 at mm/gup.c:1299 __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 Modules linked in: CPU: 1 PID: 5896 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-11705-gb0d326da462e #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 lr : __get_user_pages+0x364/0x3b0 mm/gup.c:1297 sp : ffff800088c0baa0 x29: ffff800088c0baa0 x28: 0000000000000000 x27: 0000000000080101 x26: 0000000000000000 x25: f7ff000036a93600 x24: 00000000000001ff x23: 0000000000000001 x22: 0000000000000000 x21: f9ff0000218dc9c0 x20: 0000000000000249 x19: 0000000020200700 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000004000061ea8 x14: 000000000000019f x13: 0000000000000000 x12: ffff8000824dfe70 x11: 0000000000000001 x10: 8f137d37790edeeb x9 : 155319f1925becce x8 : f7ff000036a947a8 x7 : 0000000000000004 x6 : 0000000000000190 x5 : 0000000000000000 x4 : fffffc0001ef0000 x3 : 0000000000000001 x2 : 0000000000000007 x1 : fffffc0001ef0034 x0 : 0000000000000000 Call trace: __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 __get_user_pages_locked mm/gup.c:1509 [inline] __gup_longterm_locked+0x1c8/0xaf4 mm/gup.c:2216 pin_user_pages+0x78/0xa0 mm/gup.c:3389 io_pin_pages+0x78/0x12c io_uring/rsrc.c:891 io_sqe_buffer_register+0x70/0x420 io_uring/rsrc.c:927 io_sqe_buffers_register+0x118/0x268 io_uring/rsrc.c:1045 __io_uring_register io_uring/register.c:415 [inline] __do_sys_io_uring_register io_uring/register.c:598 [inline] __se_sys_io_uring_register io_uring/register.c:559 [inline] __arm64_sys_io_uring_register+0xf4/0xcd0 io_uring/register.c:559 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:51 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:136 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:155 el0_svc+0x34/0xd8 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:595 ---[ end trace 0000000000000000 ]---