syzbot

 sign-in | mailing list | source | docs
🐞 Open [994] ≡ Subsystems 🐞 Fixed [5244] 🐞 Invalid [12516] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

KASAN: use-after-free Write in enqueue_timer

Status: fixed on 2023/02/24 13:50
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+6fd64001c20aa99e34a4@syzkaller.appspotmail.com
Fix commit: ab0377803daf mrp: introduce active flags to prevent UAF when applicant uninit
First crash: 529d, last: 529d
▶ ▼ Discussions (10)
Title Replies (including bot) Last reply
[PATCH AUTOSEL 6.0 01/73] drm/etnaviv: add missing quirks for GC300 75 (75) 2022/12/24 00:35
[PATCH AUTOSEL 5.15 01/46] drm/etnaviv: add missing quirks for GC300 48 (48) 2022/12/24 00:29
[PATCH AUTOSEL 6.1 01/85] drm/etnaviv: add missing quirks for GC300 86 (86) 2022/12/19 01:08
[PATCH AUTOSEL 4.9 01/20] wifi: ath9k: verify the expected usb_endpoints are present 20 (20) 2022/12/18 16:23
[PATCH AUTOSEL 4.14 01/23] wifi: ath9k: verify the expected usb_endpoints are present 23 (23) 2022/12/18 16:21
[PATCH AUTOSEL 4.19 01/26] wifi: ath9k: verify the expected usb_endpoints are present 26 (26) 2022/12/18 16:20
[PATCH AUTOSEL 5.4 01/30] drm/etnaviv: add missing quirks for GC300 30 (30) 2022/12/18 16:18
[PATCH AUTOSEL 5.10 01/39] drm/etnaviv: add missing quirks for GC300 39 (39) 2022/12/18 16:15
[PATCH] mrp: introduce active flags to prevent UAF when applicant uninit 2 (2) 2022/11/18 12:40
[syzbot] KASAN: use-after-free Write in enqueue_timer 1 (2) 2022/11/15 06:39
▶ ▼ Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-54 KASAN: use-after-free Write in enqueue_timer C 3758 7h42m 439d 0/2 upstream: reported C repro on 2023/02/12 21:09
android-5-15 KASAN: use-after-free Write in enqueue_timer 1 99d 99d 0/2 auto-obsoleted due to no activity on 2024/04/17 12:01
upstream KASAN: slab-use-after-free Write in enqueue_timer net 18 347d 362d 0/26 auto-obsoleted due to no activity on 2023/08/22 15:17
upstream KASAN: invalid-access Write in enqueue_timer ext4 20 1144d 1166d 0/26 auto-closed as invalid on 2021/07/08 00:48

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in hlist_add_head include/linux/list.h:929 [inline]
BUG: KASAN: use-after-free in enqueue_timer+0x18/0xa4 kernel/time/timer.c:605
Write at addr f9ff000024df6058 by task syz-fuzzer/2256
Pointer tag: [f9], memory tag: [fe]

CPU: 1 PID: 2256 Comm: syz-fuzzer Not tainted 6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
Call trace:
 dump_backtrace.part.0+0xe0/0xf0 arch/arm64/kernel/stacktrace.c:156
 dump_backtrace arch/arm64/kernel/stacktrace.c:162 [inline]
 show_stack+0x18/0x40 arch/arm64/kernel/stacktrace.c:163
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x68/0x84 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:284 [inline]
 print_report+0x1a8/0x4a0 mm/kasan/report.c:395
 kasan_report+0x94/0xb4 mm/kasan/report.c:495
 __do_kernel_fault+0x164/0x1e0 arch/arm64/mm/fault.c:320
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_tag_check_fault+0x78/0x8c arch/arm64/mm/fault.c:749
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 hlist_add_head include/linux/list.h:929 [inline]
 enqueue_timer+0x18/0xa4 kernel/time/timer.c:605
 mod_timer+0x14/0x20 kernel/time/timer.c:1161
 mrp_periodic_timer_arm net/802/mrp.c:614 [inline]
 mrp_periodic_timer+0xa0/0xc0 net/802/mrp.c:627
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline]
 el1_interrupt+0x38/0x6c arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x2c arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:577
 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline]
 _raw_spin_unlock_irq+0x10/0x50 kernel/locking/spinlock.c:202
 do_signal arch/arm64/kernel/signal.c:1071 [inline]
 do_notify_resume+0x25c/0x13b0 arch/arm64/kernel/signal.c:1124
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_interrupt+0x100/0x104 arch/arm64/kernel/entry-common.c:719
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582

Allocated by task 20941:
 kasan_save_stack+0x2c/0x60 mm/kasan/common.c:45
 save_stack_info+0x38/0x130 mm/kasan/tags.c:104
 kasan_save_alloc_info+0x14/0x20 mm/kasan/tags.c:138
 ____kasan_kmalloc mm/kasan/common.c:371 [inline]
 ____kasan_kmalloc mm/kasan/common.c:330 [inline]
 __kasan_kmalloc+0x9c/0xb0 mm/kasan/common.c:380
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 kmalloc_trace+0x5c/0x70 mm/slab_common.c:1050
 kmalloc include/linux/slab.h:553 [inline]
 kzalloc include/linux/slab.h:689 [inline]
 nci_allocate_device net/nfc/nci/core.c:1157 [inline]
 nci_allocate_device+0x5c/0x170 net/nfc/nci/core.c:1143
 virtual_ncidev_open+0x54/0xe0 drivers/nfc/virtual_ncidev.c:139
 misc_open+0x124/0x170 drivers/char/misc.c:143
 chrdev_open+0xc0/0x260 fs/char_dev.c:414
 do_dentry_open+0x13c/0x4d0 fs/open.c:882
 vfs_open+0x2c/0x40 fs/open.c:1013
 do_open fs/namei.c:3557 [inline]
 path_openat+0x568/0xee0 fs/namei.c:3713
 do_filp_open+0x80/0x130 fs/namei.c:3740
 do_sys_openat2+0xb4/0x16c fs/open.c:1310
 do_sys_open fs/open.c:1326 [inline]
 __do_sys_openat fs/open.c:1342 [inline]
 __se_sys_openat fs/open.c:1337 [inline]
 __arm64_sys_openat+0x64/0xb0 fs/open.c:1337
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52
 el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x2c/0xd0 arch/arm64/kernel/syscall.c:206
 el0_svc+0x2c/0xb0 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581

Freed by task 20952:
 kasan_save_stack+0x2c/0x60 mm/kasan/common.c:45
 save_stack_info+0x38/0x130 mm/kasan/tags.c:104
 kasan_save_free_info+0x18/0x30 mm/kasan/tags.c:143
 ____kasan_slab_free.constprop.0+0x1b8/0x230 mm/kasan/common.c:236
 __kasan_slab_free+0x10/0x1c mm/kasan/common.c:244
 kasan_slab_free include/linux/kasan.h:177 [inline]
 slab_free_hook mm/slub.c:1724 [inline]
 slab_free_freelist_hook+0xbc/0x1fc mm/slub.c:1750
 slab_free mm/slub.c:3661 [inline]
 __kmem_cache_free+0x16c/0x2ec mm/slub.c:3674
 kfree+0x60/0xb0 mm/slab_common.c:1007
 nci_free_device+0x30/0x40 net/nfc/nci/core.c:1205
 virtual_ncidev_close+0x74/0x80 drivers/nfc/virtual_ncidev.c:167
 __fput+0x78/0x260 fs/file_table.c:320
 ____fput+0x10/0x20 fs/file_table.c:348
 task_work_run+0x80/0xe0 kernel/task_work.c:179
 get_signal+0xc8/0x7a4 kernel/signal.c:2635
 do_signal arch/arm64/kernel/signal.c:1071 [inline]
 do_notify_resume+0x178/0x13b0 arch/arm64/kernel/signal.c:1124
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581

The buggy address belongs to the object at ffff000024df6000
 which belongs to the cache kmalloc-2k of size 2048
The buggy address is located 88 bytes inside of
 2048-byte region [ffff000024df6000, ffff000024df6800)

The buggy address belongs to the physical page:
page:00000000909ac9e4 refcount:1 mapcount:0 mapping:0000000000000000 index:0xf9ff000024df6000 pfn:0x64df0
head:00000000909ac9e4 order:3 compound_mapcount:0 compound_pincount:0
flags: 0x1ffc00000010200(slab|head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0)
raw: 01ffc00000010200 0000000000000000 dead000000000122 fdff000002c01600
raw: f9ff000024df6000 000000008010000d 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff000024df5e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
 ffff000024df5f00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
>ffff000024df6000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
                                  ^
 ffff000024df6100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
 ffff000024df6200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
==================================================================
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B              6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001824 x12: 000000000000080c
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000018a8 x12: 0000000000000838
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000192c x12: 0000000000000864
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000019b0 x12: 0000000000000890
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001a34 x12: 00000000000008bc
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001ab8 x12: 00000000000008e8
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001b3c x12: 0000000000000914
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001bc0 x12: 0000000000000940
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001c44 x12: 000000000000096c
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001cc8 x12: 0000000000000998
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 72220 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001d4f x12: 00000000000009c5
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001dd3 x12: 00000000000009f1
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001e57 x12: 0000000000000a1d
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001edb x12: 0000000000000a49
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001f5f x12: 0000000000000a75
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000001fe3 x12: 0000000000000aa1
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002067 x12: 0000000000000acd
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000020eb x12: 0000000000000af9
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000216f x12: 0000000000000b25
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000021f3 x12: 0000000000000b51
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 73126 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000227d x12: 0000000000000b7f
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002301 x12: 0000000000000bab
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002385 x12: 0000000000000bd7
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002409 x12: 0000000000000c03
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000248d x12: 0000000000000c2f
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002511 x12: 0000000000000c5b
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002595 x12: 0000000000000c87
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002619 x12: 0000000000000cb3
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000269d x12: 0000000000000cdf
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002721 x12: 0000000000000d0b
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 78936 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000027a8 x12: 0000000000000d38
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000282c x12: 0000000000000d64
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000028b0 x12: 0000000000000d90
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002934 x12: 0000000000000dbc
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000029b8 x12: 0000000000000de8
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002a3c x12: 0000000000000e14
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002ac0 x12: 0000000000000e40
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002b44 x12: 0000000000000e6c
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002bc8 x12: 0000000000000e98
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002c4c x12: 0000000000000ec4
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 73677 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002cf1 x12: 0000000000000efb
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002d75 x12: 0000000000000f27
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002df9 x12: 0000000000000f53
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002e7d x12: 0000000000000f7f
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002f01 x12: 0000000000000fab
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000002f85 x12: 0000000000000fd7
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000003009 x12: 0000000000001003
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000308d x12: 000000000000102f
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000003111 x12: 000000000000105b
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000003195 x12: 0000000000001087
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 69839 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000321c x12: 00000000000010b4
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000032a0 x12: 00000000000010e0
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000003324 x12: 000000000000110c
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000033a8 x12: 0000000000001138
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000342c x12: 0000000000001164
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000034b0 x12: 0000000000001190
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 0000000000003534 x12: 00000000000011bc
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000035b8 x12: 00000000000011e8
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 000000000000363c x12: 0000000000001214
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address ffff80007592d000
WARNING: CPU: 1 PID: 2256 at arch/arm64/mm/fault.c:369 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
Modules linked in:
CPU: 1 PID: 2256 Comm: syz-fuzzer Tainted: G    B   W          6.1.0-rc5-syzkaller-00008-ge01d50cbd6ee #0
Hardware name: linux,dummy-virt (DT)
pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
lr : __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
sp : ffff80000800bbc0
x29: ffff80000800bbc0 x28: f3ff000004672f40 x27: 0000000000000008
x26: ffff80000a29c008 x25: ffff80000a2a2cc0 x24: ffff80000a2c3388
x23: 00000000a04000c9 x22: 0000000000000025 x21: ffff80007592d000
x20: ffff80000800bc80 x19: 0000000097c18005 x18: 00000000fffffffe
x17: 6666207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a2eda70 x13: 00000000000036c0 x12: 0000000000001240
x11: 2073736572646461 x10: ffff80000a39da70 x9 : 00000000ffffe000
x8 : ffff80000a2eda70 x7 : ffff80000a39da70 x6 : 0000000000000000
x5 : ffff00007fbcba10 x4 : 0000000000000000 x3 : ffff80007592d000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : f3ff000004672f40
Call trace:
 __do_kernel_fault+0x1ac/0x1e0 arch/arm64/mm/fault.c:369
 do_bad_area arch/arm64/mm/fault.c:473 [inline]
 do_translation_fault+0x50/0xc0 arch/arm64/mm/fault.c:691
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:825
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 get_work_pool kernel/workqueue.c:741 [inline]
 __queue_work+0xf4/0x4a0 kernel/workqueue.c:1458
 queue_work_on+0x6c/0x90 kernel/workqueue.c:1545
 queue_work include/linux/workqueue.h:503 [inline]
 nci_cmd_timer+0x28/0x34 net/nfc/nci/core.c:615
 call_timer_fn.constprop.0+0x24/0x80 kernel/time/timer.c:1474
 expire_timers+0x98/0xc4 kernel/time/timer.c:1519
 __run_timers kernel/time/timer.c:1790 [inline]
 __run_timers kernel/time/timer.c:1763 [inline]
 run_timer_softirq+0xf4/0x254 kernel/time/timer.c:1803
 _stext+0x124/0x2a4
 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:889
 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:84
 invoke_softirq kernel/softirq.c:452 [inline]
 __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662
 el0_interrupt+0x54/0x104 arch/arm64/kernel/entry-common.c:717
 __el0_irq_handler_common+0x18/0x2c arch/arm64/kernel/entry-common.c:724
 el0t_64_irq_handler+0x10/0x20 arch/arm64/kernel/entry-common.c:729
 el0t_64_irq+0x198/0x19c arch/arm64/kernel/entry.S:582
---[ end trace 0000000000000000 ]---

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/11/15 06:13 upstream e01d50cbd6ee 97de9cfc .config console log report info ci-qemu2-arm64-mte KASAN: use-after-free Write in enqueue_timer
* Struck through repros no longer work on HEAD.