------------[ cut here ]------------ WARNING: CPU: 1 PID: 6399 at mm/gup.c:2121 is_valid_gup_args+0x1dc/0x230 Modules linked in: CPU: 1 PID: 6399 Comm: syz-executor.7 Not tainted 6.2.0-rc7-next-20230207 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:is_valid_gup_args+0x1dc/0x230 Code: dd ff 48 83 3c 24 00 0f 85 76 ff ff ff e8 5c 50 dd ff 0f 0b 45 31 e4 eb c9 e8 50 50 dd ff 0f 0b 45 31 e4 eb bd e8 44 50 dd ff <0f> 0b 45 31 e4 eb b1 e8 38 50 dd ff 0f 0b 45 31 e4 eb a5 e8 2c 50 RSP: 0018:ffff88803d57f508 EFLAGS: 00010212 RAX: 0000000000008153 RBX: 0000000000040000 RCX: ffffc90007817000 RDX: 0000000000040000 RSI: ffffffff816e127c RDI: 0000000000000005 RBP: ffff88803d57f568 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000040000 R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000040000 R15: 0000000000040000 FS: 00007f0a235a5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2c228000 CR3: 000000001f3ec000 CR4: 0000000000350ee0 Call Trace: pin_user_pages_fast+0x83/0x100 iov_iter_extract_pages+0x2b9/0x1e90 bio_iov_iter_get_pages+0x341/0x13c0 iomap_dio_bio_iter+0x78e/0x1350 __iomap_dio_rw+0xe22/0x1ce0 iomap_dio_rw+0x40/0xa0 ext4_file_write_iter+0xb5d/0x1930 vfs_write+0x9b4/0xdc0 ksys_write+0x12b/0x260 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f0a2602fb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0a235a5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f0a26142f60 RCX: 00007f0a2602fb19 RDX: 0000000000140000 RSI: 0000000020000200 RDI: 0000000000000003 RBP: 00007f0a26089f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffec6e9f4bf R14: 00007f0a235a5300 R15: 0000000000022000 irq event stamp: 1165 hardirqs last enabled at (1175): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1186): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (836): [] __irq_exit_rcu+0xcc/0x110 softirqs last disabled at (805): [] __irq_exit_rcu+0xcc/0x110 ---[ end trace 0000000000000000 ]--- Process accounting resumed syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) perf: interrupt took too long (2526 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 perf: interrupt took too long (3199 > 3157), lowering kernel.perf_event_max_sample_rate to 62000 perf: interrupt took too long (4028 > 3998), lowering kernel.perf_event_max_sample_rate to 49000 perf: interrupt took too long (5078 > 5035), lowering kernel.perf_event_max_sample_rate to 39000 random: crng reseeded on system resumption perf: interrupt took too long (6374 > 6347), lowering kernel.perf_event_max_sample_rate to 31000 Restarting kernel threads ... done. random: crng reseeded on system resumption random: crng reseeded on system resumption Restarting kernel threads ... done. random: crng reseeded on system resumption Restarting kernel threads ... done. random: crng reseeded on system resumption Restarting kernel threads ... done. random: crng reseeded on system resumption Restarting kernel threads ... done. random: crng reseeded on system resumption device lo entered promiscuous mode Restarting kernel threads ... done. device lo left promiscuous mode device lo entered promiscuous mode random: crng reseeded on system resumption Restarting kernel threads ... done. device lo entered promiscuous mode device lo entered promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo left promiscuous mode device lo entered promiscuous mode device lo entered promiscuous mode netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'.