Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000015282c000 [0000000000000000] pgd=080000015d067003, p4d=080000015d067003, pud=0000000000000000 Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 26979 Comm: kworker/u4:4 Not tainted 6.2.0-rc6-syzkaller-17549-gca72d58361ee #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Workqueue: xfs_iwalk-12762 xfs_pwork_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : xfs_alloc_read_agf+0x44/0x374 fs/xfs/libxfs/xfs_alloc.c:3090 lr : xfs_alloc_read_agf+0x44/0x374 fs/xfs/libxfs/xfs_alloc.c:3084 sp : ffff800020f73780 x29: ffff800020f737b0 x28: ffff80000c2b3928 x27: ffff0000c43f1550 x26: ffff0000c81a09e8 x25: 0000000000001fff x24: 000000000007ffff x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 x20: ffff00011d2ec658 x19: ffff800020f73818 x18: 00000000000000c0 x17: ffff80000df8d158 x16: ffff80000ddcb118 x15: ffff00011ca0ce00 x14: 0000000000000000 x13: 00000000ffffffff x12: ffff00011ca0ce00 x11: ff80800008dc0f4c x10: 0000000000000000 x9 : ffff800008dc0f4c x8 : ffff00011ca0ce00 x7 : ffff800008dbe53c x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800020f73818 x2 : 0000000000000000 x1 : ffff00011d2ec658 x0 : 0000000000000000 Call trace: xfs_alloc_read_agf+0x44/0x374 fs/xfs/libxfs/xfs_alloc.c:3084 xfs_agfl_free_finish_item+0x94/0x188 fs/xfs/xfs_extfree_item.c:544 xfs_defer_finish_one fs/xfs/libxfs/xfs_defer.c:479 [inline] xfs_defer_finish_noroll+0x480/0x6ec fs/xfs/libxfs/xfs_defer.c:563 __xfs_trans_commit+0x1e0/0x498 fs/xfs/xfs_trans.c:970 xfs_trans_commit+0x24/0x34 fs/xfs/xfs_trans.c:1049 xfs_dquot_disk_alloc+0x330/0x37c fs/xfs/xfs_dquot.c:384 xfs_qm_dqread+0x98/0x1bc fs/xfs/xfs_dquot.c:665 xfs_qm_dqget+0x16c/0x2ac fs/xfs/xfs_dquot.c:870 xfs_qm_quotacheck_dqadjust+0x68/0x178 fs/xfs/xfs_qm.c:1085 xfs_qm_dqusage_adjust+0x1c0/0x2a4 fs/xfs/xfs_qm.c:1190 xfs_iwalk_ag_recs+0x150/0x214 fs/xfs/xfs_iwalk.c:220 xfs_iwalk_run_callbacks+0xc8/0x1c4 fs/xfs/xfs_iwalk.c:376 xfs_iwalk_ag+0x308/0x3e8 fs/xfs/xfs_iwalk.c:482 xfs_iwalk_ag_work+0xb4/0x104 fs/xfs/xfs_iwalk.c:624 xfs_pwork_work+0x2c/0xf4 fs/xfs/xfs_pwork.c:47 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:870 Code: aa0103f4 aa0003f6 f81f83a8 97d3b22b (f94002c0) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: aa0103f4 mov x20, x1 4: aa0003f6 mov x22, x0 8: f81f83a8 stur x8, [x29, #-8] c: 97d3b22b bl 0xffffffffff4ec8b8 * 10: f94002c0 ldr x0, [x22] <-- trapping instruction