Unable to handle kernel paging request at virtual address ffff8001f1cee000 Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005 CM = 0, WnR = 0 swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001c54db000 [ffff8001f1cee000] pgd=100000023ffff003, p4d=100000023ffff003, pud=0000000000000000 Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 14934 Comm: kworker/0:16 Not tainted 6.1.0-rc2-syzkaller-154433-g247f34f7b803 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: events free_ipc pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:87 lr : percpu_counter_add_batch+0x3c/0x170 lib/percpu_counter.c:87 sp : ffff800021d23be0 x29: ffff800021d23be0 x28: ffff80000d2fb000 x27: ffff0001187fe310 x26: 0000000000000000 x25: 0000000000000000 x24: ffff0001187fe300 x23: ffff0001187fe300 x22: ffff000118e45d80 x21: 000000007fffffff x20: ffffffffffffffff x19: ffff0000cbcea7b8 x18: 0000000000000013 x17: 0000000052172550 x16: 0000000000000001 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000003 x12: ffff80000d65f7f8 x11: ff808000095d4118 x10: 0000000000000000 x9 : ffff8001f1cee000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff8000095d57e4 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 000000007fffffff x1 : 000000007fffffff x0 : 0000000000000000 Call trace: percpu_counter_add_batch+0x4c/0x170 lib/percpu_counter.c:88 percpu_counter_add_local include/linux/percpu_counter.h:75 [inline] percpu_counter_sub_local include/linux/percpu_counter.h:225 [inline] freeque+0x21c/0x2e8 ipc/msg.c:289 free_ipcs+0x11c/0x170 ipc/namespace.c:125 msg_exit_ns+0x3c/0x5c ipc/msg.c:1334 free_ipc_ns+0x34/0x12c ipc/namespace.c:138 free_ipc+0x4c/0x7c ipc/namespace.c:157 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289 worker_thread+0x340/0x610 kernel/workqueue.c:2436 kthread+0x12c/0x158 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 Code: f9402e68 d538d089 93407eb5 aa1503e1 (b8a86937) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: f9402e68 ldr x8, [x19, #88] 4: d538d089 mrs x9, tpidr_el1 8: 93407eb5 sxtw x21, w21 c: aa1503e1 mov x1, x21 * 10: b8a86937 ldrsw x23, [x9, x8] <-- trapping instruction