================================================================== BUG: KASAN: invalid-access in copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26 Read at addr f1ff000012f6e000 by task syz-executor.1/2225 Pointer tag: [f1], memory tag: [f3] CPU: 1 PID: 2225 Comm: syz-executor.1 Not tainted 6.0.0-syzkaller-00679-g522667b24f08 #0 Hardware name: linux,dummy-virt (DT) Call trace: dump_backtrace.part.0+0xd0/0xe0 arch/arm64/kernel/stacktrace.c:182 dump_backtrace arch/arm64/kernel/stacktrace.c:188 [inline] show_stack+0x18/0x50 arch/arm64/kernel/stacktrace.c:189 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x68/0x84 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:317 [inline] print_report+0x104/0x604 mm/kasan/report.c:433 kasan_report+0x8c/0xb0 mm/kasan/report.c:495 __do_kernel_fault+0x11c/0x1bc arch/arm64/mm/fault.c:319 do_bad_area arch/arm64/mm/fault.c:469 [inline] do_tag_check_fault+0x78/0x90 arch/arm64/mm/fault.c:742 do_mem_abort+0x44/0x9c arch/arm64/mm/fault.c:818 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:366 el1h_64_sync_handler+0xb0/0xd0 arch/arm64/kernel/entry-common.c:417 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576 copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26 copy_user_highpage+0x18/0x50 arch/arm64/mm/copypage.c:34 __wp_page_copy_user mm/memory.c:2856 [inline] wp_page_copy+0xa0/0x6f0 mm/memory.c:3117 do_wp_page+0x140/0x660 mm/memory.c:3479 handle_pte_fault mm/memory.c:4935 [inline] __handle_mm_fault+0x664/0xe7c mm/memory.c:5059 handle_mm_fault+0xec/0x280 mm/memory.c:5157 __do_page_fault arch/arm64/mm/fault.c:502 [inline] do_page_fault+0x120/0x3d0 arch/arm64/mm/fault.c:602 do_mem_abort+0x44/0x9c arch/arm64/mm/fault.c:818 el0_da+0x30/0xbc arch/arm64/kernel/entry-common.c:502 el0t_64_sync_handler+0x68/0xc0 arch/arm64/kernel/entry-common.c:645 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581 The buggy address belongs to the physical page: page:0000000096af88ad refcount:3 mapcount:2 mapping:0000000000000000 index:0xffffffffe pfn:0x52f6e memcg:f3ff0000174f4000 anon flags: 0x1ffc3800208001c(uptodate|dirty|lru|swapbacked|arch_2|node=0|zone=0|lastcpupid=0x7ff|kasantag=0xe) raw: 01ffc3800208001c fffffc0000371848 f5ff000005daf000 f6ff000005b49481 raw: 0000000ffffffffe 0000000000000000 0000000300000001 f3ff0000174f4000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff000012f6de00: f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 ffff000012f6df00: f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 >ffff000012f6e000: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 ^ ffff000012f6e100: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 ffff000012f6e200: f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 ==================================================================