On Sun, Aug 29, 2021 at 01:19:53AM +0000, Yafang Shao wrote: > After some analyzation, I found it was caused by a bug in GUP. > When the kernel module calls get_user_pages() with FOLL_MLOCK being set but > FOLL_POPULATE being unset, if the page of the user addr isn't present, the Which is not a valid way to call get_user_pages. What we need to do is to reject that case. No-tree user does this so that bug is what ever crap out of tree code you're using.