------------[ cut here ]------------ WARNING: CPU: 1 PID: 6967 at mm/gup.c:1299 __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 Modules linked in: CPU: 1 PID: 6967 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 Hardware name: linux,dummy-virt (DT) pstate: 81400009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 lr : __get_user_pages+0x364/0x3b0 mm/gup.c:1297 sp : ffff80008aafbaa0 x29: ffff80008aafbaa0 x28: 0000000000000000 x27: 0000000000080101 x26: 0000000000000000 x25: fdff0000295f5a00 x24: 0000000000000000 x23: 0000000000000001 x22: 0000000000000000 x21: fcff000038e729c0 x20: 0000000000000441 x19: 0000000020001700 x18: 0000000000000001 x17: ffff800080026c50 x16: ffff8000805b2a14 x15: 00000000200002c0 x14: 0000ffff909fffff x13: 0000000000000000 x12: 1f1fe000054d7a81 x11: 0000000000000000 x10: ffff800081d82880 x9 : f8ff00002a6bd400 x8 : 000000000000000d x7 : 0000000020000000 x6 : 0000000000000001 x5 : 0000000000000000 x4 : fffffc0001f50040 x3 : 0000000000000002 x2 : 0000000000000007 x1 : fffffc0001f50034 x0 : 0000000000000000 Call trace: __get_user_pages+0x36c/0x3b0 mm/gup.c:1299 __get_user_pages_locked mm/gup.c:1509 [inline] __gup_longterm_locked+0x1c8/0xaf4 mm/gup.c:2216 pin_user_pages+0x78/0xa0 mm/gup.c:3389 io_pin_pages+0x78/0x12c io_uring/rsrc.c:891 io_sqe_buffer_register+0x70/0x420 io_uring/rsrc.c:927 io_sqe_buffers_register+0x118/0x268 io_uring/rsrc.c:1045 __io_uring_register io_uring/register.c:415 [inline] __do_sys_io_uring_register io_uring/register.c:598 [inline] __se_sys_io_uring_register io_uring/register.c:559 [inline] __arm64_sys_io_uring_register+0xf4/0xcd0 io_uring/register.c:559 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:51 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:136 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:155 el0_svc+0x34/0xd8 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:595 ---[ end trace 0000000000000000 ]---