Unable to handle kernel paging request at virtual address ffff8001f1cbe000
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005
  CM = 0, WnR = 0
swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c5508000
[ffff8001f1cbe000] pgd=100000023ffff003, p4d=100000023ffff003, pud=0000000000000000
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 10768 Comm: syz-executor.3 Not tainted 6.1.0-rc5-syzkaller-32269-g9500fc6e9e60 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:87
lr : percpu_counter_add_batch+0x3c/0x170 lib/percpu_counter.c:87
sp : ffff800014b5b600
x29: ffff800014b5b600 x28: ffff0000c5cabf00 x27: 0000000000000001
x26: 0000000000060800 x25: ffff0000c6748000 x24: ffff0000c6748000
x23: 0000000000000001 x22: 000000000005d000 x21: 000000003fffffff
x20: 000000000005d000 x19: ffff0001182f9b08 x18: fffffffffffffff5
x17: 0000000000000000 x16: ffff80000dc18158 x15: ffff0000c4041a40
x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c4041a40
x11: ff808000095f6cf8 x10: 0000000000000000 x9 : ffff8001f1cbe000
x8 : 0000000000000000 x7 : ffff80000955c5ac x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 000000003fffffff x1 : 000000003fffffff x0 : 0000000000000000
Call trace:
 percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:88
 blkg_rwstat_add block/blk-cgroup-rwstat.h:73 [inline]
 __blk_throtl_bio+0x490/0x564 block/blk-throttle.c:2171
 blk_throtl_bio block/blk-throttle.h:204 [inline]
 submit_bio_noacct+0x5f8/0x850 block/blk-core.c:778
 submit_bio+0x174/0x1ac block/blk-core.c:827
 ext4_io_submit+0x6c/0x84 fs/ext4/page-io.c:378
 ext4_writepages+0x6e4/0xfd4 fs/ext4/inode.c:2854
 do_writepages+0x144/0x27c mm/page-writeback.c:2469
 filemap_fdatawrite_wbc+0xac/0xd0 mm/filemap.c:388
 __filemap_fdatawrite_range mm/filemap.c:421 [inline]
 __filemap_fdatawrite mm/filemap.c:427 [inline]
 filemap_flush+0x60/0x8c mm/filemap.c:454
 ext4_alloc_da_blocks+0x40/0x5c fs/ext4/inode.c:3140
 ext4_release_file+0x4c/0x17c fs/ext4/file.c:158
 __fput+0x198/0x3e4 fs/file_table.c:320
 ____fput+0x20/0x30 fs/file_table.c:348
 task_work_run+0x100/0x148 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0x2dc/0xcac kernel/exit.c:820
 do_group_exit+0x98/0xcc kernel/exit.c:950
 get_signal+0xabc/0xb2c kernel/signal.c:2858
 do_signal+0x128/0x438 arch/arm64/kernel/signal.c:1071
 do_notify_resume+0xc0/0x1f0 arch/arm64/kernel/signal.c:1124
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x9c/0x150 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
Code: f9402e68 d538d089 93407eb5 aa1503e1 (b8a86937) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	f9402e68 	ldr	x8, [x19, #88]
   4:	d538d089 	mrs	x9, tpidr_el1
   8:	93407eb5 	sxtw	x21, w21
   c:	aa1503e1 	mov	x1, x21
* 10:	b8a86937 	ldrsw	x23, [x9, x8] <-- trapping instruction