Unable to handle kernel paging request at virtual address dfff800000000000 Mem abort info: ESR = 0x96000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 [dfff800000000000] address between user and kernel address ranges Internal error: Oops: 96000004 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 21281 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller-00365-g9288e1f7d396 #0 Hardware name: linux,dummy-virt (DT) pstate: 00000005 (nzcv daif -PAN -UAO -TCO BTYPE=--) pc : __list_del_entry_valid+0x78/0x15c lib/list_debug.c:51 lr : __list_del_entry include/linux/list.h:132 [inline] lr : list_del_init include/linux/list.h:204 [inline] lr : __fw_load_abort drivers/base/firmware_loader/fallback.c:97 [inline] lr : __fw_load_abort drivers/base/firmware_loader/fallback.c:88 [inline] lr : kill_pending_fw_fallback_reqs+0xe0/0x2c0 drivers/base/firmware_loader/fallback.c:119 sp : ffff0000284674d0 x29: ffff0000284674d0 x28: ffff00000aaa4078 x27: ffff00000aaa4020 x26: 0000000000000000 x25: 0000000000000001 x24: 0000000000000003 x23: ffff800016652ca0 x22: ffffffffffffff40 x21: 0000000000000000 x20: 0000000000000001 x19: ffff00000aaa40c0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 1fffe0000508ce44 x13: 0000000000000001 x12: ffff700002cca299 x11: 1ffff00002cca298 x10: ffff700002cca298 x9 : dfff800000000000 x8 : ffff8000166514c7 x7 : 0000000000000001 x6 : 00008ffffd335d68 x5 : ffff8000166514c0 x4 : 1fffe00001409349 x3 : 0000000000000000 x2 : 1fffe00001554819 x1 : 0000000000000000 x0 : dfff800000000000 Call trace: __list_del_entry_valid+0x78/0x15c lib/list_debug.c:51 __list_del_entry include/linux/list.h:132 [inline] list_del_init include/linux/list.h:204 [inline] __fw_load_abort drivers/base/firmware_loader/fallback.c:97 [inline] __fw_load_abort drivers/base/firmware_loader/fallback.c:88 [inline] kill_pending_fw_fallback_reqs+0xe0/0x2c0 drivers/base/firmware_loader/fallback.c:119 fw_pm_notify+0xb8/0x160 drivers/base/firmware_loader/main.c:1448 notifier_call_chain+0xc0/0x180 kernel/notifier.c:83 notifier_call_chain_robust kernel/notifier.c:118 [inline] blocking_notifier_call_chain_robust kernel/notifier.c:302 [inline] blocking_notifier_call_chain_robust+0xc4/0x150 kernel/notifier.c:290 pm_notifier_call_chain_robust+0x24/0x44 kernel/power/main.c:87 snapshot_open+0x128/0x1d4 kernel/power/user.c:75 misc_open+0x294/0x3a0 drivers/char/misc.c:141 chrdev_open+0x1c0/0x54c fs/char_dev.c:414 do_dentry_open+0x3b8/0xd9c fs/open.c:826 vfs_open+0x90/0xd0 fs/open.c:940 do_open fs/namei.c:3367 [inline] path_openat+0xfa4/0x1f9c fs/namei.c:3500 do_filp_open+0x13c/0x310 fs/namei.c:3527 do_sys_openat2+0x124/0x320 fs/open.c:1187 do_sys_open fs/open.c:1203 [inline] __do_compat_sys_openat fs/open.c:1261 [inline] __se_compat_sys_openat fs/open.c:1259 [inline] __arm64_compat_sys_openat+0x12c/0x1c0 fs/open.c:1259 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.0+0xf0/0x2c0 arch/arm64/kernel/syscall.c:129 do_el0_svc_compat+0x40/0x70 arch/arm64/kernel/syscall.c:174 el0_svc_compat+0x24/0x3c arch/arm64/kernel/entry-common.c:494 el0_sync_compat_handler+0x90/0x140 arch/arm64/kernel/entry-common.c:503 el0_sync_compat+0x174/0x180 arch/arm64/kernel/entry.S:708 Code: 540005e0 d343fe81 d2d00000 f2fbffe0 (38e06820) ---[ end trace 8e435453ec39a14d ]---