------------[ cut here ]------------ WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x538/0x6a8 mm/slub.c:6841, CPU#1: syz.0.8858/31262 Modules linked in: CPU: 1 UID: 0 PID: 31262 Comm: syz.0.8858 Not tainted syzkaller #0 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : __kvmalloc_node_noprof+0x538/0x6a8 mm/slub.c:6841 lr : __kmalloc_large_node_noprof mm/slub.c:5306 [inline] lr : __do_kmalloc_node mm/slub.c:5322 [inline] lr : __kvmalloc_node_noprof+0x524/0x6a8 mm/slub.c:6833 sp : ffff800088ce3b50 x29: ffff800088ce3b80 x28: fcf00000049e5500 x27: 0000000000000000 x26: ffff8000806e519c x25: ccaf8000806e519c x24: 0000000000000001 x23: 00000000004028c0 x22: 00000000ffffffff x21: 0000000000400cc0 x20: 0000000000000021 x19: 0000000080000008 x18: 0000000000000002 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 000000000006d04a x12: 0000000000000000 x11: 0000000000001000 x10: 0000000000000001 x9 : 0000000000000080 x8 : 0000000000000030 x7 : ffff800082e287d0 x6 : 0000000000000001 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 00000000004428c0 x1 : 000000007fffffff x0 : 0000000000000000 Call trace: __kvmalloc_node_noprof+0x538/0x6a8 mm/slub.c:6841 (P) io_pin_pages+0x5c/0x124 io_uring/memmap.c:59 io_sqe_buffer_register+0x98/0x5e4 io_uring/rsrc.c:884 io_sqe_buffers_register+0x180/0x1f4 io_uring/rsrc.c:995 __io_uring_register io_uring/register.c:767 [inline] __do_sys_io_uring_register io_uring/register.c:1029 [inline] __se_sys_io_uring_register io_uring/register.c:1006 [inline] __arm64_sys_io_uring_register+0x2b4/0xda0 io_uring/register.c:1006 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x54/0x10c arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x1c/0x34 arch/arm64/kernel/syscall.c:140 el0_svc+0x38/0x1fc arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0xa0/0xf0 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:594 ---[ end trace 0000000000000000 ]---