8<--- cut here --- Unable to handle kernel paging request at virtual address e03c4000 pgd = 86c1b2c0 [e03c4000] *pgd=80000080007003, *pmd=844f1003, *pte=00000000 Internal error: Oops: a07 [#1] PREEMPT SMP ARM Modules linked in: CPU: 1 PID: 6108 Comm: syz-executor.1 Not tainted 5.12.0-rc3-syzkaller #0 Hardware name: ARM-Versatile Express PC is at __raw_writel arch/arm/include/asm/io.h:95 [inline] PC is at bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:65 [inline] PC is at bitfill_aligned+0x94/0x138 drivers/video/fbdev/core/cfbfillrect.c:35 LR is at bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:62 [inline] LR is at bitfill_aligned+0x80/0x138 drivers/video/fbdev/core/cfbfillrect.c:35 pc : [<808f355c>] lr : [<808f3548>] psr: 20000113 sp : 836dbad0 ip : 836dbb00 fp : 836dbafc r10: 0000ab00 r9 : 00000020 r8 : ffffffff r7 : 00000000 r6 : 00000000 r5 : e03c3000 r4 : 00ffffff r3 : e03c4020 r2 : 00000150 r1 : 00000020 r0 : 00000558 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 30c5387d Table: 86c1b2c0 DAC: 00000000 Process syz-executor.1 (pid: 6108, stack limit = 0x836da210) Stack: (0x836dbad0 to 0x836dc000) bac0: 00ffffff 844c5000 00000000 e03c3000 bae0: 0000ab00 00ffffff 808f34c8 00000000 836dbb4c 836dbb00 808f3340 808f34d4 bb00: 0000ab00 00000020 836dbb04 56b92eae 8452c334 8452cc1c 00080000 00000000 bb20: 00000000 836dbb74 844c5000 000002f0 00000010 833a7c6c 833a7c6c 83420800 bb40: 836dbb6c 836dbb50 809b51b4 808f319c 836dbba4 836dbb60 844c5000 00000558 bb60: 836dbbac 836dbb70 808ed840 809b5178 833a7c6c 00000000 00000010 00000558 bb80: 000002f0 00000000 00000000 56b92eae 808ed764 833a7b34 8452cc00 82b5a808 bba0: 836dbbc4 836dbbb0 808e7814 808ed770 844c5000 833a7b34 836dbcac 836dbbc8 bbc0: 808ec8ac 808e77bc 836dbc64 844c5000 844c50a8 00000000 836dbc2c 00000400 bbe0: 00000300 00000400 00000300 00000000 00000000 00000020 00000000 00000010 bc00: 00000008 00000000 00000008 00000008 00000000 00000000 00000008 00000000 bc20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000001 bc40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 bc60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 56b92eae bc80: 83420800 83420800 00000000 8452cc00 00000001 00000000 8452cc00 00000000 bca0: 836dbce4 836dbcb0 8095bc9c 808ec604 808df644 808df160 00000000 56b92eae bcc0: 844c5000 844c5000 83420800 8452cc00 00000001 00000000 836dbdc4 836dbce8 bce0: 808ebb40 8095bbc0 836dbd04 836dbcf8 8181dacc 00000400 00000300 00000400 bd00: 00000300 00000000 00000000 00000020 00000000 00000010 00000008 00000000 bd20: 00000008 00000008 00000000 00000000 00000008 00000000 00000000 00000000 bd40: 00000000 00000000 00000280 00000000 00000000 00000001 00000000 00000000 bd60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 bd80: 00000000 00000000 00000000 00000000 00000000 56b92eae 00000001 833aa120 bda0: 83420800 00000001 00000000 0000003a 83420800 8669ec00 836dbde4 836dbdc8 bdc0: 8095bea8 808eb994 00000000 8669ec00 00004b3a 83420800 836dbe64 836dbde8 bde0: 809535a8 8095be08 8181dacc 8181d97c 836dbe2c 836dbe00 8181c9a4 8181dabc be00: 00000000 00000000 81f94a4c 00000103 82bfd371 8589db40 00000004 00000036 be20: 836dbe54 836dbe30 8027ea14 8181c88c 00000000 56b92eae 81f94a4c fffffdfd be40: 00004b3a 8669ec00 8589db40 fffff73a 00000000 8669ec00 836dbf0c 836dbe68 be60: 8093f890 80951c38 00000000 56b92eae 83c12d88 0000003a 8377f5e8 0000004b be80: 00000001 8589db40 00000004 00000036 836dbeec 836dbea0 80701b40 806f7810 bea0: 00000001 0000004b 0000003a 836dbebc 83e80910 841d8cc0 00004b3a 8589db0b bec0: 836dbeb0 8589db40 00000004 56b92eae 821280c8 00000000 8589db40 56b92eae bee0: 836dbf0c 00004b3a 00000000 8589db41 00000000 8589db40 00000004 8377f5e8 bf00: 836dbfa4 836dbf10 804f33f4 8093f4d8 8020d140 8020e34c 00000000 80200e90 bf20: 828a2438 80200e90 869ec100 80200060 836dbf4c 836dbf40 8181dacc 8181d97c bf40: 836dbf74 836dbf50 8181cb8c 8181dabc 836dbf98 80384d84 828abd1c 80200e90 bf60: 60000093 30c5387d 836dbf94 836dbf78 828abd1c 56b92eae 00000000 00000000 bf80: 00000000 ffffffff 00000036 80200224 836da000 00000036 00000000 836dbfa8 bfa0: 80200060 804f32e0 00000000 00000000 00000004 00004b3a 00000000 00000000 bfc0: 00000000 00000000 ffffffff 00000036 7ef57332 76f676d0 7ef574ac 76f6720c bfe0: 76f67048 76f67038 00018d78 0004b600 60000010 00000004 00000000 00000000 Backtrace: [<808f34c8>] (bitfill_aligned) from [<808f3340>] (sys_fillrect+0x1b0/0x338 drivers/video/fbdev/core/sysfillrect.c:291) r10:00000000 r9:808f34c8 r8:00ffffff r7:0000ab00 r6:e03c3000 r5:00000000 r4:844c5000 r3:00ffffff [<808f3190>] (sys_fillrect) from [<809b51b4>] (drm_fb_helper_sys_fillrect drivers/gpu/drm/drm_fb_helper.c:764 [inline]) [<808f3190>] (sys_fillrect) from [<809b51b4>] (drm_fbdev_fb_fillrect+0x48/0x4c drivers/gpu/drm/drm_fb_helper.c:2258) r10:83420800 r9:833a7c6c r8:833a7c6c r7:00000010 r6:000002f0 r5:844c5000 r4:836dbb74 [<809b516c>] (drm_fbdev_fb_fillrect) from [<808ed840>] (bit_clear_margins+0xdc/0x104 drivers/video/fbdev/core/bitblit.c:232) r5:00000558 r4:844c5000 [<808ed764>] (bit_clear_margins) from [<808e7814>] (fbcon_clear_margins+0x64/0x68 drivers/video/fbdev/core/fbcon.c:1315) r7:82b5a808 r6:8452cc00 r5:833a7b34 r4:808ed764 [<808e77b0>] (fbcon_clear_margins) from [<808ec8ac>] (fbcon_switch+0x2b4/0x4ac drivers/video/fbdev/core/fbcon.c:2143) r5:833a7b34 r4:844c5000 [<808ec5f8>] (fbcon_switch) from [<8095bc9c>] (redraw_screen+0xe8/0x248 drivers/tty/vt/vt.c:1021) r10:00000000 r9:8452cc00 r8:00000000 r7:00000001 r6:8452cc00 r5:00000000 r4:83420800 [<8095bbb4>] (redraw_screen) from [<808ebb40>] (fbcon_blank+0x1b8/0x250 drivers/video/fbdev/core/fbcon.c:2204) r8:00000000 r7:00000001 r6:8452cc00 r5:83420800 r4:844c5000 [<808eb988>] (fbcon_blank) from [<8095bea8>] (do_unblank_screen+0xac/0x17c drivers/tty/vt/vt.c:4405) r10:8669ec00 r9:83420800 r8:0000003a r7:00000000 r6:00000001 r5:83420800 r4:833aa120 [<8095bdfc>] (do_unblank_screen) from [<809535a8>] (vt_kdsetmode drivers/tty/vt/vt_ioctl.c:276 [inline]) [<8095bdfc>] (do_unblank_screen) from [<809535a8>] (vt_k_ioctl drivers/tty/vt/vt_ioctl.c:381 [inline]) [<8095bdfc>] (do_unblank_screen) from [<809535a8>] (vt_ioctl+0x197c/0x1be8 drivers/tty/vt/vt_ioctl.c:713) r7:83420800 r6:00004b3a r5:8669ec00 r4:00000000 [<80951c2c>] (vt_ioctl) from [<8093f890>] (tty_ioctl+0x3c4/0xc1c drivers/tty/tty_io.c:2801) r10:8669ec00 r9:00000000 r8:fffff73a r7:8589db40 r6:8669ec00 r5:00004b3a r4:fffffdfd [<8093f4cc>] (tty_ioctl) from [<804f33f4>] (vfs_ioctl fs/ioctl.c:48 [inline]) [<8093f4cc>] (tty_ioctl) from [<804f33f4>] (do_vfs_ioctl fs/ioctl.c:725 [inline]) [<8093f4cc>] (tty_ioctl) from [<804f33f4>] (__do_sys_ioctl fs/ioctl.c:751 [inline]) [<8093f4cc>] (tty_ioctl) from [<804f33f4>] (sys_ioctl+0x120/0xaa4 fs/ioctl.c:739) r10:8377f5e8 r9:00000004 r8:8589db40 r7:00000000 r6:8589db41 r5:00000000 r4:00004b3a [<804f32d4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x2c arch/arm/mm/proc-v7.S:64) Exception stack(0x836dbfa8 to 0x836dbff0) bfa0: 00000000 00000000 00000004 00004b3a 00000000 00000000 bfc0: 00000000 00000000 ffffffff 00000036 7ef57332 76f676d0 7ef574ac 76f6720c bfe0: 76f67048 76f67038 00018d78 0004b600 r10:00000036 r9:836da000 r8:80200224 r7:00000036 r6:ffffffff r5:00000000 r4:00000000 Code: 9a000012 e2853020 e1a02000 e2422008 (e5034020) ---[ end trace a004ad37816dce34 ]---