WARNING in __apply_to_page_range ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006f80 x29: ffff8000800070a0 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 x26: ffff0001ffa75000 x25: dfff800000000000 x24: ffff0001ffa74000 x23: ffff0001fea8e3a0 x22: 0000000000000100 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200051 hardirqs last enabled at (200050): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (200050): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (200051): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (200010): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff800080006f40 x29: ffff800080006f40 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 x26: ffff0001ffa75000 x25: ffff0001ffa74000 x24: ffff0001ffa74000 x23: 006800023fa74707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200051 hardirqs last enabled at (200050): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (200050): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (200051): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (200010): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007160 x29: ffff800080007280 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 x26: ffff0001ffa75000 x25: dfff800000000000 x24: ffff0001ffa74000 x23: ffff0001fea8e3a0 x22: 0000000000000100 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 x17: 0000000000020010 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 skb_kfree_head net/core/skbuff.c:1056 [inline] skb_free_head+0xbc/0x198 net/core/skbuff.c:1070 skb_release_data+0x66c/0x820 net/core/skbuff.c:1097 skb_release_all net/core/skbuff.c:1162 [inline] __kfree_skb net/core/skbuff.c:1176 [inline] consume_skb+0xb0/0x130 net/core/skbuff.c:1408 arp_process+0xb78/0x12b8 net/ipv4/arp.c:941 NF_HOOK+0x2b8/0x34c include/linux/netfilter.h:314 arp_rcv+0x2a8/0x430 net/ipv4/arp.c:991 __netif_receive_skb_list_ptype net/core/dev.c:5935 [inline] __netif_receive_skb_list_core+0x60c/0x67c net/core/dev.c:5977 __netif_receive_skb_list net/core/dev.c:6029 [inline] netif_receive_skb_list_internal+0x74c/0x9e0 net/core/dev.c:6120 gro_normal_list include/net/gro.h:532 [inline] napi_complete_done+0x250/0x614 net/core/dev.c:6490 gve_napi_poll+0x1f4/0x3ac drivers/net/ethernet/google/gve/gve_main.c:388 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200071 hardirqs last enabled at (200070): [] __el1_irq arch/arm64/kernel/entry-common.c:588 [inline] hardirqs last enabled at (200070): [] el1_interrupt+0x44/0x54 arch/arm64/kernel/entry-common.c:598 hardirqs last disabled at (200071): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (200010): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800073e0 x29: ffff800080007500 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 x26: ffff0001ffa79000 x25: dfff800000000000 x24: ffff0001ffa78000 x23: ffff0001fea8e3c0 x22: 0000000000000300 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000dc18ee1e x17: dfff800000000000 x16: ffff80008adb82bc x15: ffff700010000ec4 x14: 1ffff00010000ec4 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] lapb_send_control+0x48/0x320 net/lapb/lapb_subr.c:227 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200537 hardirqs last enabled at (200536): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (200536): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (200537): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (200494): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff8000800073a0 x29: ffff8000800073a0 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 x26: ffff0001ffa79000 x25: ffff0001ffa78000 x24: ffff0001ffa78000 x23: 006800023fa78707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000300 x19: ffff80008f346040 x18: 00000000dc18ee1e x17: dfff800000000000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff800080ac62d0 x2 : ffff8000800075e0 x1 : 0000000000000300 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] lapb_send_control+0x48/0x320 net/lapb/lapb_subr.c:227 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200537 hardirqs last enabled at (200536): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (200536): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (200537): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (200494): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007160 x29: ffff800080007280 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 x26: ffff0001ffa79000 x25: dfff800000000000 x24: ffff0001ffa78000 x23: ffff0001fea8e3c0 x22: 0000000000000500 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000dc18ee1e x17: dfff800000000000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free_freelist_hook mm/slub.c:2394 [inline] slab_free_bulk mm/slub.c:4666 [inline] kmem_cache_free_bulk+0x490/0x51c mm/slub.c:5243 kfree_skb_list_reason+0x3ac/0x418 net/core/skbuff.c:1264 __dev_xmit_skb net/core/dev.c:4093 [inline] __dev_queue_xmit+0x1ac8/0x31f0 net/core/dev.c:4595 dev_queue_xmit include/linux/netdevice.h:3350 [inline] lapbeth_data_transmit+0x1fc/0x2a8 drivers/net/wan/lapbether.c:260 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x160/0x208 net/lapb/lapb_out.c:149 lapb_send_control+0x21c/0x320 net/lapb/lapb_subr.c:251 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 200551 hardirqs last enabled at (200550): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (200550): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (200551): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (200494): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006f80 x29: ffff8000800070a0 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 x26: ffff0001ffa7f000 x25: dfff800000000000 x24: ffff0001ffa7e000 x23: ffff0001fea8e3f0 x22: 0000000000000100 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 201465 hardirqs last enabled at (201464): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (201464): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (201465): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (201448): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff800080006f40 x29: ffff800080006f40 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 x26: ffff0001ffa7f000 x25: ffff0001ffa7e000 x24: ffff0001ffa7e000 x23: 006800023fa7e707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 201465 hardirqs last enabled at (201464): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (201464): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (201465): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (201448): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006b20 x29: ffff800080006c40 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 x26: ffff0001ffa7f000 x25: dfff800000000000 x24: ffff0001ffa7e000 x23: ffff0001fea8e3f0 x22: 0000000000000100 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff x17: ffff800092f37000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080006d20 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 skb_kfree_head net/core/skbuff.c:1056 [inline] skb_free_head+0xbc/0x198 net/core/skbuff.c:1070 skb_release_data+0x66c/0x820 net/core/skbuff.c:1097 skb_release_all net/core/skbuff.c:1162 [inline] __kfree_skb net/core/skbuff.c:1176 [inline] consume_skb+0xb0/0x130 net/core/skbuff.c:1408 tcp_rcv_state_process+0x1288/0x3630 net/ipv4/tcp_input.c:6808 tcp_v4_do_rcv+0x704/0xbc4 net/ipv4/tcp_ipv4.c:1948 tcp_v4_rcv+0x1dd0/0x28b8 net/ipv4/tcp_ipv4.c:2353 ip_protocol_deliver_rcu+0x1f8/0x484 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x27c/0x4e8 net/ipv4/ip_input.c:233 NF_HOOK+0x2c4/0x358 include/linux/netfilter.h:314 ip_local_deliver+0x120/0x194 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:469 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:578 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:627 [inline] ip_sublist_rcv+0x8a0/0xb68 net/ipv4/ip_input.c:635 ip_list_rcv+0x398/0x3ec net/ipv4/ip_input.c:669 __netif_receive_skb_list_ptype net/core/dev.c:5930 [inline] __netif_receive_skb_list_core+0x4e4/0x67c net/core/dev.c:5977 __netif_receive_skb_list net/core/dev.c:6029 [inline] netif_receive_skb_list_internal+0x74c/0x9e0 net/core/dev.c:6120 gro_normal_list include/net/gro.h:532 [inline] napi_complete_done+0x250/0x614 net/core/dev.c:6490 gve_napi_poll+0x1f4/0x3ac drivers/net/ethernet/google/gve/gve_main.c:388 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 201497 hardirqs last enabled at (201496): [] __el1_irq arch/arm64/kernel/entry-common.c:588 [inline] hardirqs last enabled at (201496): [] el1_interrupt+0x44/0x54 arch/arm64/kernel/entry-common.c:598 hardirqs last disabled at (201497): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (201448): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006f40 x29: ffff800080007060 x28: ffff0001ffa80fff x27: ffff0001fec50fe8 x26: ffff0001ffa81000 x25: dfff800000000000 x24: ffff0001ffa80000 x23: ffff0001fea8e400 x22: 0000000000000100 x21: ffff80008f346040 x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e30 x14: 1ffff00010000e30 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007140 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 napi_get_frags+0x74/0x144 net/core/gro.c:673 gve_rx_add_frags+0x1a0/0x3d8 drivers/net/ethernet/google/gve/gve_rx.c:460 gve_rx_qpl drivers/net/ethernet/google/gve/gve_rx.c:638 [inline] gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:691 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xf14/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 203529 hardirqs last enabled at (203528): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (203528): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (203529): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (203512): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (203512): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (203519): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff800080006f00 x29: ffff800080006f00 x28: ffff0001ffa80fff x27: ffff0001fec50fe8 x26: ffff0001ffa81000 x25: ffff0001ffa80000 x24: ffff0001ffa80000 x23: 006800023fa80707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007140 x3 : ffff800080ac62d0 x2 : ffff800080007140 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 napi_get_frags+0x74/0x144 net/core/gro.c:673 gve_rx_add_frags+0x1a0/0x3d8 drivers/net/ethernet/google/gve/gve_rx.c:460 gve_rx_qpl drivers/net/ethernet/google/gve/gve_rx.c:638 [inline] gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:691 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xf14/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:26 [inline] (P) arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:48 (P) cpuidle_idle_call kernel/sched/idle.c:185 [inline] do_idle+0x1d8/0x454 kernel/sched/idle.c:325 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:423 rest_init+0x2d8/0x2f4 init/main.c:743 start_kernel+0x44c/0x4a8 init/main.c:1099 __primary_switched+0x8c/0x94 arch/arm64/kernel/head.S:246 irq event stamp: 203529 hardirqs last enabled at (203528): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (203528): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (203529): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (203512): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (203512): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (203519): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006f80 x29: ffff8000800070a0 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 x26: ffff0001ffa8b000 x25: dfff800000000000 x24: ffff0001ffa8a000 x23: ffff0001fea8e450 x22: 0000000000000100 x21: ffff0000cba48000 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cba48000 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __sanitizer_cov_trace_pc+0x0/0x84 kernel/audit_tree.c:174 (P) arch_kunwind_consume_entry arch/arm64/kernel/stacktrace.c:375 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:290 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x1dc/0x368 arch/arm64/kernel/stacktrace.c:387 return_address+0x94/0x104 arch/arm64/kernel/return_address.c:42 get_lock_parent_ip include/linux/ftrace.h:1091 [inline] preempt_latency_start kernel/sched/core.c:5838 [inline] preempt_count_add+0xe0/0x310 kernel/sched/core.c:5863 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x20/0x60 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] __pte_offset_map_lock+0xf0/0x1d8 mm/pgtable-generic.c:402 pte_offset_map_lock include/linux/mm.h:3149 [inline] do_anonymous_page mm/memory.c:5021 [inline] do_pte_missing mm/memory.c:4158 [inline] handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault mm/memory.c:6140 [inline] handle_mm_fault+0x3d0c/0x4cf0 mm/memory.c:6309 do_page_fault+0x428/0x1554 arch/arm64/mm/fault.c:647 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:783 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:919 el0_da+0x64/0x160 arch/arm64/kernel/entry-common.c:627 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:789 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 51989 hardirqs last enabled at (51988): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (51988): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (51989): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff800080006f40 x29: ffff800080006f40 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 x26: ffff0001ffa8b000 x25: ffff0001ffa8a000 x24: ffff0001ffa8a000 x23: 006800023fa8a707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000100 x19: ffff0000cba48000 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1fffe00019749000 x13: 0000000000000000 x12: 0000000000000000 x11: ffff600019749001 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cba48000 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 kmalloc_reserve+0xc4/0x268 net/core/skbuff.c:577 __alloc_skb+0x170/0x2ec net/core/skbuff.c:668 napi_alloc_skb+0xa0/0x5fc net/core/skbuff.c:810 gve_rx_copy_data+0x40/0x1a0 drivers/net/ethernet/google/gve/gve_utils.c:72 gve_rx_copy+0x8c/0xe8 drivers/net/ethernet/google/gve/gve_utils.c:89 gve_rx_skb drivers/net/ethernet/google/gve/gve_rx.c:663 [inline] gve_rx drivers/net/ethernet/google/gve/gve_rx.c:884 [inline] gve_clean_rx_done drivers/net/ethernet/google/gve/gve_rx.c:1024 [inline] gve_rx_poll+0xa08/0x365c drivers/net/ethernet/google/gve/gve_rx.c:1095 gve_napi_poll+0x140/0x3ac drivers/net/ethernet/google/gve/gve_main.c:372 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __sanitizer_cov_trace_pc+0x0/0x84 kernel/audit_tree.c:174 (P) arch_kunwind_consume_entry arch/arm64/kernel/stacktrace.c:375 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:290 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x1dc/0x368 arch/arm64/kernel/stacktrace.c:387 return_address+0x94/0x104 arch/arm64/kernel/return_address.c:42 get_lock_parent_ip include/linux/ftrace.h:1091 [inline] preempt_latency_start kernel/sched/core.c:5838 [inline] preempt_count_add+0xe0/0x310 kernel/sched/core.c:5863 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x20/0x60 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] __pte_offset_map_lock+0xf0/0x1d8 mm/pgtable-generic.c:402 pte_offset_map_lock include/linux/mm.h:3149 [inline] do_anonymous_page mm/memory.c:5021 [inline] do_pte_missing mm/memory.c:4158 [inline] handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault mm/memory.c:6140 [inline] handle_mm_fault+0x3d0c/0x4cf0 mm/memory.c:6309 do_page_fault+0x428/0x1554 arch/arm64/mm/fault.c:647 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:783 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:919 el0_da+0x64/0x160 arch/arm64/kernel/entry-common.c:627 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:789 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 51989 hardirqs last enabled at (51988): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (51988): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (51989): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007160 x29: ffff800080007280 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 x26: ffff0001ffa8b000 x25: dfff800000000000 x24: ffff0001ffa8a000 x23: ffff0001fea8e450 x22: 0000000000000100 x21: ffff0000cba48000 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff x17: 0000000000020010 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cba48000 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 skb_kfree_head net/core/skbuff.c:1056 [inline] skb_free_head+0xbc/0x198 net/core/skbuff.c:1070 skb_release_data+0x66c/0x820 net/core/skbuff.c:1097 skb_release_all net/core/skbuff.c:1162 [inline] __kfree_skb net/core/skbuff.c:1176 [inline] consume_skb+0xb0/0x130 net/core/skbuff.c:1408 arp_process+0xb78/0x12b8 net/ipv4/arp.c:941 NF_HOOK+0x2b8/0x34c include/linux/netfilter.h:314 arp_rcv+0x2a8/0x430 net/ipv4/arp.c:991 __netif_receive_skb_list_ptype net/core/dev.c:5935 [inline] __netif_receive_skb_list_core+0x60c/0x67c net/core/dev.c:5977 __netif_receive_skb_list net/core/dev.c:6029 [inline] netif_receive_skb_list_internal+0x74c/0x9e0 net/core/dev.c:6120 gro_normal_list include/net/gro.h:532 [inline] napi_complete_done+0x250/0x614 net/core/dev.c:6490 gve_napi_poll+0x1f4/0x3ac drivers/net/ethernet/google/gve/gve_main.c:388 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __sanitizer_cov_trace_pc+0x0/0x84 kernel/audit_tree.c:174 (P) arch_kunwind_consume_entry arch/arm64/kernel/stacktrace.c:375 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:290 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x1dc/0x368 arch/arm64/kernel/stacktrace.c:387 return_address+0x94/0x104 arch/arm64/kernel/return_address.c:42 get_lock_parent_ip include/linux/ftrace.h:1091 [inline] preempt_latency_start kernel/sched/core.c:5838 [inline] preempt_count_add+0xe0/0x310 kernel/sched/core.c:5863 __raw_spin_lock include/linux/spinlock_api_smp.h:132 [inline] _raw_spin_lock+0x20/0x60 kernel/locking/spinlock.c:154 spin_lock include/linux/spinlock.h:351 [inline] __pte_offset_map_lock+0xf0/0x1d8 mm/pgtable-generic.c:402 pte_offset_map_lock include/linux/mm.h:3149 [inline] do_anonymous_page mm/memory.c:5021 [inline] do_pte_missing mm/memory.c:4158 [inline] handle_pte_fault mm/memory.c:5997 [inline] __handle_mm_fault mm/memory.c:6140 [inline] handle_mm_fault+0x3d0c/0x4cf0 mm/memory.c:6309 do_page_fault+0x428/0x1554 arch/arm64/mm/fault.c:647 do_translation_fault+0xc4/0x114 arch/arm64/mm/fault.c:783 do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:919 el0_da+0x64/0x160 arch/arm64/kernel/entry-common.c:627 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:789 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 52017 hardirqs last enabled at (52016): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (52016): [] exit_to_kernel_mode+0xc0/0xf0 arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (52017): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800079c0 x29: ffff800080007ae0 x28: ffff0001ffa98fff x27: ffff0001fec50fe8 x26: ffff0001ffa99000 x25: dfff800000000000 x24: ffff0001ffa98000 x23: ffff0001fea8e4c0 x22: 0000000000000100 x21: ffff0000cba48000 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9dd x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9de x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000cba48000 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007bc0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 rcu_guarded_free+0x4c/0x5c mm/kfence/core.c:587 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 local_daif_restore+0x20/0x3c arch/arm64/include/asm/daifflags.h:117 (P) el0_da+0x54/0x160 arch/arm64/kernel/entry-common.c:626 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:789 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 112007 hardirqs last enabled at (112006): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (112006): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (112007): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (108904): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (111975): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800079c0 x29: ffff800080007ae0 x28: ffff0001ffaa0fff x27: ffff0001fec50fe8 x26: ffff0001ffaa1000 x25: dfff800000000000 x24: ffff0001ffaa0000 x23: ffff0001fea8e500 x22: 0000000000000100 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb967 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb968 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007bc0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 rcu_guarded_free+0x4c/0x5c mm/kfence/core.c:587 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 string_nocheck lib/vsprintf.c:643 [inline] (P) string+0x1c4/0x290 lib/vsprintf.c:721 (P) vsnprintf+0x814/0xd60 lib/vsprintf.c:2852 seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 15783 hardirqs last enabled at (15782): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (15782): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (15783): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (15236): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (15236): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (15761): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800073e0 x29: ffff800080007500 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 x26: ffff0001ffaaf000 x25: dfff800000000000 x24: ffff0001ffaae000 x23: ffff0001fea8e570 x22: 0000000000000300 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000ec4 x14: 1ffff00010000ec4 x13: 0000000000000004 x12: ffffffffffffffff x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] lapb_send_control+0x48/0x320 net/lapb/lapb_subr.c:227 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 format_decode+0x0/0xacc lib/vsprintf.c:-1 (P) seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 105547 hardirqs last enabled at (105546): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (105546): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (105547): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff8000800073a0 x29: ffff8000800073a0 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 x26: ffff0001ffaaf000 x25: ffff0001ffaae000 x24: ffff0001ffaae000 x23: 006800023faae707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000300 x19: ffff0000d9ffbd00 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1fffe0001b3ff7a0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001b3ff7a1 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff800080ac62d0 x2 : ffff8000800075e0 x1 : 0000000000000300 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] lapb_send_control+0x48/0x320 net/lapb/lapb_subr.c:227 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 format_decode+0x0/0xacc lib/vsprintf.c:-1 (P) seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 105547 hardirqs last enabled at (105546): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (105546): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (105547): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007160 x29: ffff800080007280 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 x26: ffff0001ffaaf000 x25: dfff800000000000 x24: ffff0001ffaae000 x23: ffff0001fea8e570 x22: 0000000000000500 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free_freelist_hook mm/slub.c:2394 [inline] slab_free_bulk mm/slub.c:4666 [inline] kmem_cache_free_bulk+0x490/0x51c mm/slub.c:5243 kfree_skb_list_reason+0x3ac/0x418 net/core/skbuff.c:1264 __dev_xmit_skb net/core/dev.c:4093 [inline] __dev_queue_xmit+0x1ac8/0x31f0 net/core/dev.c:4595 dev_queue_xmit include/linux/netdevice.h:3350 [inline] lapbeth_data_transmit+0x1fc/0x2a8 drivers/net/wan/lapbether.c:260 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x160/0x208 net/lapb/lapb_out.c:149 lapb_send_control+0x21c/0x320 net/lapb/lapb_subr.c:251 lapb_t1timer_expiry+0x490/0x864 net/lapb/lapb_timer.c:-1 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 format_decode+0x0/0xacc lib/vsprintf.c:-1 (P) seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 105565 hardirqs last enabled at (105564): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (105564): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (105565): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800078a0 x29: ffff8000800079c0 x28: ffff0001ffaacfff x27: ffff0001fec50fe8 x26: ffff0001ffaad000 x25: dfff800000000000 x24: ffff0001ffaac000 x23: ffff0001fea8e560 x22: 0000000000000100 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 ptlock_free+0x54/0x6c mm/memory.c:7364 pagetable_dtor include/linux/mm.h:3109 [inline] pagetable_dtor_free include/linux/mm.h:3116 [inline] __tlb_remove_table+0x30/0x274 include/asm-generic/tlb.h:215 __tlb_remove_table_free mm/mmu_gather.c:227 [inline] tlb_remove_table_rcu+0x8c/0x19c mm/mmu_gather.c:290 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 preempt_count arch/arm64/include/asm/preempt.h:13 [inline] (P) check_kcov_mode kernel/kcov.c:183 [inline] (P) __sanitizer_cov_trace_pc+0x14/0x84 kernel/kcov.c:217 (P) vsnprintf+0xcc/0xd60 lib/vsprintf.c:2795 seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 167541 hardirqs last enabled at (167540): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (167540): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (167541): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (167012): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (167012): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (167469): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800078a0 x29: ffff8000800079c0 x28: ffff0001ffaa4fff x27: ffff0001fec50fe8 x26: ffff0001ffaa5000 x25: dfff800000000000 x24: ffff0001ffaa4000 x23: ffff0001fea8e520 x22: 0000000000000100 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 ptlock_free+0x54/0x6c mm/memory.c:7364 pagetable_dtor include/linux/mm.h:3109 [inline] pagetable_dtor_free include/linux/mm.h:3116 [inline] __tlb_remove_table+0x30/0x274 include/asm-generic/tlb.h:215 __tlb_remove_table_free mm/mmu_gather.c:227 [inline] tlb_remove_table_rcu+0x8c/0x19c mm/mmu_gather.c:290 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 preempt_count arch/arm64/include/asm/preempt.h:13 [inline] (P) check_kcov_mode kernel/kcov.c:183 [inline] (P) __sanitizer_cov_trace_pc+0x14/0x84 kernel/kcov.c:217 (P) vsnprintf+0xcc/0xd60 lib/vsprintf.c:2795 seq_vprintf fs/seq_file.c:391 [inline] seq_printf+0x148/0x22c fs/seq_file.c:406 s_show+0x194/0x294 kernel/kallsyms.c:743 seq_read_iter+0x85c/0xc2c fs/seq_file.c:272 seq_read+0x238/0x33c fs/seq_file.c:162 pde_read fs/proc/inode.c:308 [inline] proc_reg_read+0x17c/0x2d4 fs/proc/inode.c:320 vfs_read+0x22c/0x898 fs/read_write.c:568 ksys_read+0x120/0x210 fs/read_write.c:713 __do_sys_read fs/read_write.c:722 [inline] __se_sys_read fs/read_write.c:720 [inline] __arm64_sys_read+0x7c/0x90 fs/read_write.c:720 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 167567 hardirqs last enabled at (167566): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (167566): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (167567): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (167012): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (167012): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (167469): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007900 x29: ffff800080007a20 x28: ffff0001ffad0fff x27: ffff0001fec50fe8 x26: ffff0001ffad1000 x25: dfff800000000000 x24: ffff0001ffad0000 x23: ffff0001fea8e680 x22: 0000000000000100 x21: ffff0000d9ffbd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9fa x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9fb x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007b00 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kfree+0x268/0x474 mm/slub.c:4841 slab_free_after_rcu_debug+0x78/0x2f4 mm/slub.c:4679 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 stackinfo_on_stack arch/arm64/include/asm/stacktrace/common.h:52 [inline] (P) unwind_find_stack+0x54/0x150 arch/arm64/include/asm/stacktrace/common.h:79 (P) kunwind_next_frame_record arch/arm64/kernel/stacktrace.c:225 [inline] kunwind_next arch/arm64/kernel/stacktrace.c:264 [inline] do_kunwind arch/arm64/kernel/stacktrace.c:292 [inline] kunwind_stack_walk arch/arm64/kernel/stacktrace.c:363 [inline] arch_stack_walk+0x210/0x368 arch/arm64/kernel/stacktrace.c:387 stack_trace_save+0x94/0xd8 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_alloc_info+0x44/0x54 mm/kasan/generic.c:562 unpoison_slab_object mm/kasan/common.c:319 [inline] __kasan_slab_alloc+0x70/0x88 mm/kasan/common.c:345 kasan_slab_alloc include/linux/kasan.h:250 [inline] slab_post_alloc_hook mm/slub.c:4147 [inline] slab_alloc_node mm/slub.c:4196 [inline] kmem_cache_alloc_lru_noprof+0x23c/0x3ec mm/slub.c:4215 __d_alloc+0x44/0x648 fs/dcache.c:1681 d_alloc fs/dcache.c:1760 [inline] d_alloc_parallel+0x80/0x1110 fs/dcache.c:2525 __lookup_slow+0x104/0x378 fs/namei.c:1802 lookup_slow+0x5c/0x80 fs/namei.c:1834 walk_component+0x270/0x364 fs/namei.c:2138 lookup_last fs/namei.c:2636 [inline] path_lookupat+0x13c/0x3d0 fs/namei.c:2660 filename_lookup+0x1ac/0x454 fs/namei.c:2689 vfs_statx+0xec/0x4c8 fs/stat.c:350 vfs_fstatat+0xd4/0x150 fs/stat.c:372 __do_sys_newfstatat fs/stat.c:536 [inline] __se_sys_newfstatat fs/stat.c:530 [inline] __arm64_sys_newfstatat+0x108/0x18c fs/stat.c:530 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 349681 hardirqs last enabled at (349680): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (349680): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (349681): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (346282): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (346282): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (349663): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6499 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000800078a0 x29: ffff8000800079c0 x28: ffff0001ffae0fff x27: ffff0001fec50fe8 x26: ffff0001ffae1000 x25: dfff800000000000 x24: ffff0001ffae0000 x23: ffff0001fea8e700 x22: 0000000000000100 x21: ffff0000c9dabd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9dabd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 ptlock_free+0x54/0x6c mm/memory.c:7364 pagetable_dtor include/linux/mm.h:3109 [inline] pagetable_dtor_free include/linux/mm.h:3116 [inline] __tlb_remove_table+0x30/0x274 include/asm-generic/tlb.h:215 __tlb_remove_table_free mm/mmu_gather.c:227 [inline] tlb_remove_table_rcu+0x8c/0x19c mm/mmu_gather.c:290 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __pi_memset_generic+0x8c/0x188 arch/arm64/lib/memset.S:107 (P) smack_task_kill+0xa4/0x1d0 security/smack/smack_lsm.c:2343 security_task_kill+0xf4/0x318 security/security.c:3675 check_kill_permission+0x2ec/0x474 kernel/signal.c:832 do_send_specific+0x13c/0x2cc kernel/signal.c:4123 do_tkill kernel/signal.c:4150 [inline] __do_sys_tgkill kernel/signal.c:4169 [inline] __se_sys_tgkill kernel/signal.c:4163 [inline] __arm64_sys_tgkill+0x12c/0x188 kernel/signal.c:4163 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 27607 hardirqs last enabled at (27606): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (27606): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (27607): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (25446): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (27523): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6499 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080007900 x29: ffff800080007a20 x28: ffff0001ffae6fff x27: ffff0001fec50fe8 x26: ffff0001ffae7000 x25: dfff800000000000 x24: ffff0001ffae6000 x23: ffff0001fea8e730 x22: 0000000000000100 x21: ffff0000c9dabd00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9c7 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9c8 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c9dabd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080007b00 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kfree+0x268/0x474 mm/slub.c:4841 slab_free_after_rcu_debug+0x78/0x2f4 mm/slub.c:4679 rcu_do_batch kernel/rcu/tree.c:2568 [inline] rcu_core+0x848/0x17a4 kernel/rcu/tree.c:2824 rcu_core_si+0x10/0x1c kernel/rcu/tree.c:2841 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:460 [inline] __irq_exit_rcu+0x1b0/0x478 kernel/softirq.c:680 irq_exit_rcu+0x14/0x84 kernel/softirq.c:696 __el1_irq arch/arm64/kernel/entry-common.c:584 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:598 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:603 el1h_64_irq+0x6c/0x70 arch/arm64/kernel/entry.S:596 __pi_memset_generic+0x8c/0x188 arch/arm64/lib/memset.S:107 (P) smack_task_kill+0xa4/0x1d0 security/smack/smack_lsm.c:2343 security_task_kill+0xf4/0x318 security/security.c:3675 check_kill_permission+0x2ec/0x474 kernel/signal.c:832 do_send_specific+0x13c/0x2cc kernel/signal.c:4123 do_tkill kernel/signal.c:4150 [inline] __do_sys_tgkill kernel/signal.c:4169 [inline] __se_sys_tgkill kernel/signal.c:4163 [inline] __arm64_sys_tgkill+0x12c/0x188 kernel/signal.c:4163 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x17c arch/arm64/kernel/entry-common.c:767 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 27703 hardirqs last enabled at (27702): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (27702): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (27703): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (25446): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (27523): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff8000976870a0 x29: ffff8000976871c0 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 x26: ffff0001ffae9000 x25: dfff800000000000 x24: ffff0001ffae8000 x23: ffff0001fea8e740 x22: 0000000000000100 x21: ffff0000c19f3d00 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff x17: ffff800092f37000 x16: ffff80008adb82bc x15: ffff700012ed0e5c x14: 1ffff00012ed0e5c x13: 0000000000000004 x12: ffffffffffffffff x11: 00000000dc88a375 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c19f3d00 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000976872a0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] __tcp_send_ack+0xa4/0x55c net/ipv4/tcp_output.c:4254 tcp_send_ack+0x50/0x6c net/ipv4/tcp_output.c:4286 tcp_delack_timer_handler+0x280/0x444 net/ipv4/tcp_timer.c:344 tcp_delack_timer+0x238/0x3c4 net/ipv4/tcp_timer.c:375 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:164 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 638147 hardirqs last enabled at (638146): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (638146): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (638147): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (638132): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (638132): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (638137): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:67 queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:67 __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 Modules linked in: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] pc : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] pc : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] pc : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 lr : queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] lr : __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] lr : __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] lr : change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 sp : ffff800097687060 x29: ffff800097687060 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 x26: ffff0001ffae9000 x25: ffff0001ffae8000 x24: ffff0001ffae8000 x23: 006800023fae8707 x22: 0040000000000001 x21: dfff800000000000 x20: 0000000000000100 x19: ffff0000c19f3d00 x18: 00000000ffffffff x17: ffff800092f37000 x16: ffff80008adb82bc x15: 0000000000000001 x14: 1fffe0001833e7a0 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001833e7a1 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c19f3d00 x7 : ffff800080c2c30c x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff8000976872a0 x3 : ffff800080ac62d0 x2 : ffff8000976872a0 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: queue_pte_barriers arch/arm64/include/asm/pgtable.h:67 [inline] (P) __set_pte_complete arch/arm64/include/asm/pgtable.h:387 [inline] (P) __set_pte arch/arm64/include/asm/pgtable.h:393 [inline] (P) change_page_range+0x188/0x1cc arch/arm64/mm/pageattr.c:48 (P) apply_to_pte_range mm/memory.c:2941 [inline] apply_to_pmd_range mm/memory.c:2985 [inline] apply_to_pud_range mm/memory.c:3021 [inline] apply_to_p4d_range mm/memory.c:3057 [inline] __apply_to_page_range+0xd58/0x13e4 mm/memory.c:3093 apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_unprotect mm/kfence/core.c:252 [inline] kfence_guarded_alloc+0x2e8/0xb08 mm/kfence/core.c:459 __kfence_alloc+0x394/0x45c mm/kfence/core.c:1138 kfence_alloc include/linux/kfence.h:129 [inline] slab_alloc_node mm/slub.c:4180 [inline] kmem_cache_alloc_node_noprof+0x34c/0x3f4 mm/slub.c:4248 __alloc_skb+0x144/0x2ec net/core/skbuff.c:658 alloc_skb include/linux/skbuff.h:1340 [inline] __tcp_send_ack+0xa4/0x55c net/ipv4/tcp_output.c:4254 tcp_send_ack+0x50/0x6c net/ipv4/tcp_output.c:4286 tcp_delack_timer_handler+0x280/0x444 net/ipv4/tcp_timer.c:344 tcp_delack_timer+0x238/0x3c4 net/ipv4/tcp_timer.c:375 call_timer_fn+0x1b4/0x818 kernel/time/timer.c:1789 expire_timers kernel/time/timer.c:1840 [inline] __run_timers kernel/time/timer.c:2414 [inline] __run_timer_base+0x51c/0x76c kernel/time/timer.c:2426 run_timer_base kernel/time/timer.c:2435 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2445 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 smpboot_thread_fn+0x4d8/0x9cc kernel/smpboot.c:164 kthread+0x5fc/0x75c kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:847 irq event stamp: 638147 hardirqs last enabled at (638146): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (638146): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (638147): [] kfence_guarded_alloc+0x190/0xb08 mm/kfence/core.c:438 softirqs last enabled at (638132): [] softirq_handle_end kernel/softirq.c:425 [inline] softirqs last enabled at (638132): [] handle_softirqs+0xaf8/0xc88 kernel/softirq.c:607 softirqs last disabled at (638137): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:968 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pte_range mm/memory.c:2936 [inline] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pmd_range mm/memory.c:2985 [inline] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_pud_range mm/memory.c:3021 [inline] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 apply_to_p4d_range mm/memory.c:3057 [inline] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 Modules linked in: CPU: 0 UID: 0 PID: 6096 Comm: klogd Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] pc : apply_to_pte_range mm/memory.c:2936 [inline] pc : apply_to_pmd_range mm/memory.c:2985 [inline] pc : apply_to_pud_range mm/memory.c:3021 [inline] pc : apply_to_p4d_range mm/memory.c:3057 [inline] pc : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 lr : arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] lr : apply_to_pte_range mm/memory.c:2936 [inline] lr : apply_to_pmd_range mm/memory.c:2985 [inline] lr : apply_to_pud_range mm/memory.c:3021 [inline] lr : apply_to_p4d_range mm/memory.c:3057 [inline] lr : __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 sp : ffff800080006da0 x29: ffff800080006ec0 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 x26: ffff0001ffae9000 x25: dfff800000000000 x24: ffff0001ffae8000 x23: ffff0001fea8e740 x22: 0000000000000100 x21: ffff0000d9785b80 x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 x14: 1ffff00012dfb9d1 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700012dfb9d2 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000d9785b80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800080006fa0 x3 : ffff8000802595f4 x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 Call trace: arch_enter_lazy_mmu_mode arch/arm64/include/asm/pgtable.h:82 [inline] (P) apply_to_pte_range mm/memory.c:2936 [inline] (P) apply_to_pmd_range mm/memory.c:2985 [inline] (P) apply_to_pud_range mm/memory.c:3021 [inline] (P) apply_to_p4d_range mm/memory.c:3057 [inline] (P) __apply_to_page_range+0xdb4/0x13e4 mm/memory.c:3093 (P) apply_to_page_range+0x4c/0x64 mm/memory.c:3112 __change_memory_common+0xac/0x3f8 arch/arm64/mm/pageattr.c:64 set_memory_valid+0x68/0x7c arch/arm64/mm/pageattr.c:-1 kfence_protect_page arch/arm64/include/asm/kfence.h:17 [inline] kfence_protect mm/kfence/core.c:247 [inline] kfence_guarded_free+0x278/0x5a8 mm/kfence/core.c:565 __kfence_free+0x104/0x198 mm/kfence/core.c:1187 kfence_free include/linux/kfence.h:187 [inline] slab_free_hook mm/slub.c:2318 [inline] slab_free mm/slub.c:4642 [inline] kmem_cache_free+0x250/0x550 mm/slub.c:4744 kfree_skbmem+0x14c/0x1dc net/core/skbuff.c:-1 __kfree_skb+0x60/0x78 net/core/skbuff.c:1177 tcp_data_queue+0x170/0x46f4 net/ipv4/tcp_input.c:-1 tcp_rcv_established+0xd40/0x1cc0 net/ipv4/tcp_input.c:6312 tcp_v4_do_rcv+0x3c0/0xbc4 net/ipv4/tcp_ipv4.c:1925 tcp_v4_rcv+0x202c/0x28b8 net/ipv4/tcp_ipv4.c:2363 ip_protocol_deliver_rcu+0x1f8/0x484 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x27c/0x4e8 net/ipv4/ip_input.c:233 NF_HOOK+0x2c4/0x358 include/linux/netfilter.h:314 ip_local_deliver+0x120/0x194 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:469 [inline] ip_rcv_finish+0x21c/0x248 net/ipv4/ip_input.c:447 NF_HOOK+0x2c4/0x358 include/linux/netfilter.h:314 ip_rcv+0x7c/0x9c net/ipv4/ip_input.c:567 __netif_receive_skb_one_core net/core/dev.c:5887 [inline] __netif_receive_skb+0xcc/0x2a8 net/core/dev.c:6000 process_backlog+0x60c/0x10e4 net/core/dev.c:6352 __napi_poll+0xb4/0x3fc net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x5d4/0xcc8 net/core/dev.c:7510 handle_softirqs+0x328/0xc88 kernel/softirq.c:579 __do_softirq+0x14/0x20 kernel/softirq.c:613 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x30 arch/arm64/kernel/entry.S:891 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 do_softirq+0x90/0xf8 kernel/softirq.c:480 __local_bh_enable_ip+0x240/0x35c kernel/softirq.c:407 local_bh_enable+0x28/0x34 include/linux/bottom_half.h:33 put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:244 [inline] fpsimd_restore_current_state+0x1d4/0x708 arch/arm64/kernel/fpsimd.c:1749 do_notify_resume+0x144/0x1ec arch/arm64/kernel/entry-common.c:154 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xb4/0x17c arch/arm64/kernel/entry-common.c:768 el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:786 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 168275 hardirqs last enabled at (168274): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (168274): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (168275): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:511 softirqs last enabled at (168238): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (168239): [] __do_softirq+0x14/0x20 kernel/softirq.c:613 ---[ end trace 0000000000000000 ]--- [ 41.558324][ C0] ------------[ cut here ]------------ [ 41.558361][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 41.562670][ C0] Modules linked in: [ 41.563704][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 41.566973][ C0] Tainted: [W]=WARN [ 41.567956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.570581][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.572636][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 41.574149][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 41.575628][ C0] sp : ffff800080006f80 [ 41.576742][ C0] x29: ffff8000800070a0 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 [ 41.578835][ C0] x26: ffff0001ffa75000 x25: dfff800000000000 x24: ffff0001ffa74000 [ 41.580964][ C0] x23: ffff0001fea8e3a0 x22: 0000000000000100 x21: ffff80008f346040 [ 41.583053][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 [ 41.585126][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 [ 41.587223][ C0] x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff [ 41.589302][ C0] x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 41.591397][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 41.593470][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 [ 41.595549][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 41.597653][ C0] Call trace: [ 41.598510][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 41.600054][ C0] apply_to_page_range+0x4c/0x64 [ 41.601336][ C0] __change_memory_common+0xac/0x3f8 [ 41.602712][ C0] set_memory_valid+0x68/0x7c [ 41.603967][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 41.605314][ C0] __kfence_alloc+0x394/0x45c [ 41.606534][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 41.608097][ C0] kmalloc_reserve+0xc4/0x268 [ 41.609323][ C0] __alloc_skb+0x170/0x2ec [ 41.610473][ C0] napi_alloc_skb+0xa0/0x5fc [ 41.611688][ C0] gve_rx_copy_data+0x40/0x1a0 [ 41.612933][ C0] gve_rx_copy+0x8c/0xe8 [ 41.614019][ C0] gve_rx_poll+0xa08/0x365c [ 41.615200][ C0] gve_napi_poll+0x140/0x3ac [ 41.616402][ C0] __napi_poll+0xb4/0x3fc [ 41.617544][ C0] net_rx_action+0x5d4/0xcc8 [ 41.618777][ C0] handle_softirqs+0x328/0xc88 [ 41.620041][ C0] __do_softirq+0x14/0x20 [ 41.621172][ C0] ____do_softirq+0x14/0x20 [ 41.622353][ C0] call_on_irq_stack+0x24/0x30 [ 41.623592][ C0] do_softirq_own_stack+0x20/0x2c [ 41.624920][ C0] __irq_exit_rcu+0x1b0/0x478 [ 41.626154][ C0] irq_exit_rcu+0x14/0x84 [ 41.627306][ C0] el1_interrupt+0x38/0x54 [ 41.628474][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.629796][ C0] el1h_64_irq+0x6c/0x70 [ 41.630941][ C0] arch_local_irq_enable+0x8/0xc (P) [ 41.632324][ C0] do_idle+0x1d8/0x454 [ 41.633407][ C0] cpu_startup_entry+0x5c/0x74 [ 41.634663][ C0] rest_init+0x2d8/0x2f4 [ 41.635779][ C0] start_kernel+0x44c/0x4a8 [ 41.636941][ C0] __primary_switched+0x8c/0x94 [ 41.638214][ C0] irq event stamp: 200051 [ 41.639337][ C0] hardirqs last enabled at (200050): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 41.642080][ C0] hardirqs last disabled at (200051): [] kfence_guarded_alloc+0x190/0xb08 [ 41.644836][ C0] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 [ 41.647361][ C0] softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 [ 41.649806][ C0] ---[ end trace 0000000000000000 ]--- [ 41.651224][ C0] ------------[ cut here ]------------ [ 41.651238][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 41.655338][ C0] Modules linked in: [ 41.656388][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 41.659703][ C0] Tainted: [W]=WARN [ 41.660686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.663329][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.665395][ C0] pc : change_page_range+0x188/0x1cc [ 41.666775][ C0] lr : change_page_range+0x188/0x1cc [ 41.668139][ C0] sp : ffff800080006f40 [ 41.669227][ C0] x29: ffff800080006f40 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 [ 41.671354][ C0] x26: ffff0001ffa75000 x25: ffff0001ffa74000 x24: ffff0001ffa74000 [ 41.673569][ C0] x23: 006800023fa74707 x22: 0040000000000001 x21: dfff800000000000 [ 41.675653][ C0] x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 [ 41.677777][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 [ 41.679886][ C0] x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 [ 41.682015][ C0] x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 [ 41.684172][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 41.686304][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 [ 41.688423][ C0] x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 [ 41.690564][ C0] Call trace: [ 41.691407][ C0] change_page_range+0x188/0x1cc (P) [ 41.692875][ C0] __apply_to_page_range+0xd58/0x13e4 [ 41.694295][ C0] apply_to_page_range+0x4c/0x64 [ 41.695603][ C0] __change_memory_common+0xac/0x3f8 [ 41.697015][ C0] set_memory_valid+0x68/0x7c [ 41.698220][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 41.699624][ C0] __kfence_alloc+0x394/0x45c [ 41.700913][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 41.702464][ C0] kmalloc_reserve+0xc4/0x268 [ 41.703760][ C0] __alloc_skb+0x170/0x2ec [ 41.704970][ C0] napi_alloc_skb+0xa0/0x5fc [ 41.706249][ C0] gve_rx_copy_data+0x40/0x1a0 [ 41.707498][ C0] gve_rx_copy+0x8c/0xe8 [ 41.708621][ C0] gve_rx_poll+0xa08/0x365c [ 41.709827][ C0] gve_napi_poll+0x140/0x3ac [ 41.711037][ C0] __napi_poll+0xb4/0x3fc [ 41.712165][ C0] net_rx_action+0x5d4/0xcc8 [ 41.713415][ C0] handle_softirqs+0x328/0xc88 [ 41.714715][ C0] __do_softirq+0x14/0x20 [ 41.715860][ C0] ____do_softirq+0x14/0x20 [ 41.717036][ C0] call_on_irq_stack+0x24/0x30 [ 41.718274][ C0] do_softirq_own_stack+0x20/0x2c [ 41.719584][ C0] __irq_exit_rcu+0x1b0/0x478 [ 41.720842][ C0] irq_exit_rcu+0x14/0x84 [ 41.722006][ C0] el1_interrupt+0x38/0x54 [ 41.723190][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.724511][ C0] el1h_64_irq+0x6c/0x70 [ 41.725716][ C0] arch_local_irq_enable+0x8/0xc (P) [ 41.727103][ C0] do_idle+0x1d8/0x454 [ 41.728266][ C0] cpu_startup_entry+0x5c/0x74 [ 41.729522][ C0] rest_init+0x2d8/0x2f4 [ 41.730655][ C0] start_kernel+0x44c/0x4a8 [ 41.731844][ C0] __primary_switched+0x8c/0x94 [ 41.733119][ C0] irq event stamp: 200051 [ 41.734307][ C0] hardirqs last enabled at (200050): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 41.737190][ C0] hardirqs last disabled at (200051): [] kfence_guarded_alloc+0x190/0xb08 [ 41.739901][ C0] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 [ 41.742458][ C0] softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 [ 41.744915][ C0] ---[ end trace 0000000000000000 ]--- [ 41.746899][ C0] ------------[ cut here ]------------ [ 41.746926][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 41.751188][ C0] Modules linked in: [ 41.752249][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 41.755659][ C0] Tainted: [W]=WARN [ 41.756632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.759280][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 41.761382][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 41.762867][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 41.764439][ C0] sp : ffff800080007160 [ 41.765540][ C0] x29: ffff800080007280 x28: ffff0001ffa74fff x27: ffff0001fec50fe8 [ 41.767655][ C0] x26: ffff0001ffa75000 x25: dfff800000000000 x24: ffff0001ffa74000 [ 41.769786][ C0] x23: ffff0001fea8e3a0 x22: 0000000000000100 x21: ffff80008f346040 [ 41.771952][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 [ 41.774034][ C0] x17: 0000000000020010 x16: ffff80008051bab8 x15: 0000000000000001 [ 41.776163][ C0] x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 [ 41.778275][ C0] x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 41.780355][ C0] x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 41.782483][ C0] x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 [ 41.784581][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 41.786698][ C0] Call trace: [ 41.787554][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 41.789105][ C0] apply_to_page_range+0x4c/0x64 [ 41.790404][ C0] __change_memory_common+0xac/0x3f8 [ 41.791808][ C0] set_memory_valid+0x68/0x7c [ 41.792998][ C0] kfence_guarded_free+0x278/0x5a8 [ 41.794362][ C0] __kfence_free+0x104/0x198 [ 41.795607][ C0] kmem_cache_free+0x250/0x550 [ 41.796868][ C0] skb_free_head+0xbc/0x198 [ 41.798029][ C0] skb_release_data+0x66c/0x820 [ 41.799301][ C0] consume_skb+0xb0/0x130 [ 41.800417][ C0] arp_process+0xb78/0x12b8 [ 41.801643][ C0] NF_HOOK+0x2b8/0x34c [ 41.802711][ C0] arp_rcv+0x2a8/0x430 [ 41.803761][ C0] __netif_receive_skb_list_core+0x60c/0x67c [ 41.805417][ C0] netif_receive_skb_list_internal+0x74c/0x9e0 [ 41.807054][ C0] napi_complete_done+0x250/0x614 [ 41.808407][ C0] gve_napi_poll+0x1f4/0x3ac [ 41.809614][ C0] __napi_poll+0xb4/0x3fc [ 41.810733][ C0] net_rx_action+0x5d4/0xcc8 [ 41.811931][ C0] handle_softirqs+0x328/0xc88 [ 41.813220][ C0] __do_softirq+0x14/0x20 [ 41.814377][ C0] ____do_softirq+0x14/0x20 [ 41.815571][ C0] call_on_irq_stack+0x24/0x30 [ 41.816840][ C0] do_softirq_own_stack+0x20/0x2c [ 41.818174][ C0] __irq_exit_rcu+0x1b0/0x478 [ 41.819391][ C0] irq_exit_rcu+0x14/0x84 [ 41.820541][ C0] el1_interrupt+0x38/0x54 [ 41.821731][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.823032][ C0] el1h_64_irq+0x6c/0x70 [ 41.824140][ C0] arch_local_irq_enable+0x8/0xc (P) [ 41.825591][ C0] do_idle+0x1d8/0x454 [ 41.826697][ C0] cpu_startup_entry+0x5c/0x74 [ 41.828019][ C0] rest_init+0x2d8/0x2f4 [ 41.829124][ C0] start_kernel+0x44c/0x4a8 [ 41.830298][ C0] __primary_switched+0x8c/0x94 [ 41.831540][ C0] irq event stamp: 200071 [ 41.832659][ C0] hardirqs last enabled at (200070): [] el1_interrupt+0x44/0x54 [ 41.835027][ C0] hardirqs last disabled at (200071): [] el1_dbg+0x24/0x80 [ 41.837350][ C0] softirqs last enabled at (200010): [] handle_softirqs+0xaf8/0xc88 [ 41.839876][ C0] softirqs last disabled at (200041): [] __do_softirq+0x14/0x20 [ 41.842301][ C0] ---[ end trace 0000000000000000 ]--- [ 44.346185][ C0] ------------[ cut here ]------------ [ 44.346218][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 44.350543][ C0] Modules linked in: [ 44.351598][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 44.354895][ C0] Tainted: [W]=WARN [ 44.355884][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.358487][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.360570][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 44.362106][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 44.363650][ C0] sp : ffff8000800073e0 [ 44.364726][ C0] x29: ffff800080007500 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 [ 44.366794][ C0] x26: ffff0001ffa79000 x25: dfff800000000000 x24: ffff0001ffa78000 [ 44.368920][ C0] x23: ffff0001fea8e3c0 x22: 0000000000000300 x21: ffff80008f346040 [ 44.371097][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000dc18ee1e [ 44.373161][ C0] x17: dfff800000000000 x16: ffff80008adb82bc x15: ffff700010000ec4 [ 44.375233][ C0] x14: 1ffff00010000ec4 x13: 0000000000000004 x12: ffffffffffffffff [ 44.377350][ C0] x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 [ 44.379496][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 44.381568][ C0] x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff8000802595f4 [ 44.383654][ C0] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 44.385732][ C0] Call trace: [ 44.386555][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 44.388248][ C0] apply_to_page_range+0x4c/0x64 [ 44.389542][ C0] __change_memory_common+0xac/0x3f8 [ 44.390979][ C0] set_memory_valid+0x68/0x7c [ 44.392246][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 44.393657][ C0] __kfence_alloc+0x394/0x45c [ 44.394971][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 44.396748][ C0] __alloc_skb+0x144/0x2ec [ 44.398021][ C0] lapb_send_control+0x48/0x320 [ 44.399399][ C0] lapb_t1timer_expiry+0x490/0x864 [ 44.400839][ C0] call_timer_fn+0x1b4/0x818 [ 44.402133][ C0] __run_timer_base+0x51c/0x76c [ 44.403457][ C0] run_timer_softirq+0xcc/0x194 [ 44.404772][ C0] handle_softirqs+0x328/0xc88 [ 44.406154][ C0] __do_softirq+0x14/0x20 [ 44.407418][ C0] ____do_softirq+0x14/0x20 [ 44.408651][ C0] call_on_irq_stack+0x24/0x30 [ 44.409934][ C0] do_softirq_own_stack+0x20/0x2c [ 44.411284][ C0] __irq_exit_rcu+0x1b0/0x478 [ 44.412607][ C0] irq_exit_rcu+0x14/0x84 [ 44.413781][ C0] el1_interrupt+0x38/0x54 [ 44.415082][ C0] el1h_64_irq_handler+0x18/0x24 [ 44.416496][ C0] el1h_64_irq+0x6c/0x70 [ 44.417794][ C0] arch_local_irq_enable+0x8/0xc (P) [ 44.419237][ C0] do_idle+0x1d8/0x454 [ 44.420377][ C0] cpu_startup_entry+0x5c/0x74 [ 44.421785][ C0] rest_init+0x2d8/0x2f4 [ 44.423039][ C0] start_kernel+0x44c/0x4a8 [ 44.424260][ C0] __primary_switched+0x8c/0x94 [ 44.425722][ C0] irq event stamp: 200537 [ 44.427013][ C0] hardirqs last enabled at (200536): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 44.429955][ C0] hardirqs last disabled at (200537): [] kfence_guarded_alloc+0x190/0xb08 [ 44.432734][ C0] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 [ 44.435385][ C0] softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 [ 44.437890][ C0] ---[ end trace 0000000000000000 ]--- [ 44.439427][ C0] ------------[ cut here ]------------ [ 44.439443][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 44.443760][ C0] Modules linked in: [ 44.444817][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 44.448319][ C0] Tainted: [W]=WARN [ 44.449388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.452181][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.454349][ C0] pc : change_page_range+0x188/0x1cc [ 44.455857][ C0] lr : change_page_range+0x188/0x1cc [ 44.457334][ C0] sp : ffff8000800073a0 [ 44.458433][ C0] x29: ffff8000800073a0 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 [ 44.460609][ C0] x26: ffff0001ffa79000 x25: ffff0001ffa78000 x24: ffff0001ffa78000 [ 44.462860][ C0] x23: 006800023fa78707 x22: 0040000000000001 x21: dfff800000000000 [ 44.465014][ C0] x20: 0000000000000300 x19: ffff80008f346040 x18: 00000000dc18ee1e [ 44.467201][ C0] x17: dfff800000000000 x16: ffff80008adb82bc x15: 0000000000000001 [ 44.469369][ C0] x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 [ 44.471568][ C0] x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 [ 44.473750][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 44.475948][ C0] x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff800080ac62d0 [ 44.478137][ C0] x2 : ffff8000800075e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 44.480315][ C0] Call trace: [ 44.481171][ C0] change_page_range+0x188/0x1cc (P) [ 44.482645][ C0] __apply_to_page_range+0xd58/0x13e4 [ 44.484103][ C0] apply_to_page_range+0x4c/0x64 [ 44.485507][ C0] __change_memory_common+0xac/0x3f8 [ 44.486993][ C0] set_memory_valid+0x68/0x7c [ 44.488304][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 44.489748][ C0] __kfence_alloc+0x394/0x45c [ 44.491070][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 44.492682][ C0] __alloc_skb+0x144/0x2ec [ 44.493944][ C0] lapb_send_control+0x48/0x320 [ 44.495228][ C0] lapb_t1timer_expiry+0x490/0x864 [ 44.496620][ C0] call_timer_fn+0x1b4/0x818 [ 44.497940][ C0] __run_timer_base+0x51c/0x76c [ 44.499361][ C0] run_timer_softirq+0xcc/0x194 [ 44.500732][ C0] handle_softirqs+0x328/0xc88 [ 44.502061][ C0] __do_softirq+0x14/0x20 [ 44.503217][ C0] ____do_softirq+0x14/0x20 [ 44.504463][ C0] call_on_irq_stack+0x24/0x30 [ 44.505811][ C0] do_softirq_own_stack+0x20/0x2c [ 44.507172][ C0] __irq_exit_rcu+0x1b0/0x478 [ 44.508464][ C0] irq_exit_rcu+0x14/0x84 [ 44.509688][ C0] el1_interrupt+0x38/0x54 [ 44.510967][ C0] el1h_64_irq_handler+0x18/0x24 [ 44.512371][ C0] el1h_64_irq+0x6c/0x70 [ 44.513533][ C0] arch_local_irq_enable+0x8/0xc (P) [ 44.514981][ C0] do_idle+0x1d8/0x454 [ 44.516089][ C0] cpu_startup_entry+0x5c/0x74 [ 44.517383][ C0] rest_init+0x2d8/0x2f4 [ 44.518525][ C0] start_kernel+0x44c/0x4a8 [ 44.519851][ C0] __primary_switched+0x8c/0x94 [ 44.521155][ C0] irq event stamp: 200537 [ 44.522318][ C0] hardirqs last enabled at (200536): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 44.525267][ C0] hardirqs last disabled at (200537): [] kfence_guarded_alloc+0x190/0xb08 [ 44.528085][ C0] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 [ 44.530678][ C0] softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 [ 44.533166][ C0] ---[ end trace 0000000000000000 ]--- [ 44.534951][ C0] ------------[ cut here ]------------ [ 44.534972][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 44.539359][ C0] Modules linked in: [ 44.540457][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 44.543869][ C0] Tainted: [W]=WARN [ 44.544864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.547617][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.549772][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 44.551299][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 44.552958][ C0] sp : ffff800080007160 [ 44.554033][ C0] x29: ffff800080007280 x28: ffff0001ffa78fff x27: ffff0001fec50fe8 [ 44.556313][ C0] x26: ffff0001ffa79000 x25: dfff800000000000 x24: ffff0001ffa78000 [ 44.558491][ C0] x23: ffff0001fea8e3c0 x22: 0000000000000500 x21: ffff80008f346040 [ 44.560615][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000dc18ee1e [ 44.562901][ C0] x17: dfff800000000000 x16: ffff80008051bab8 x15: 0000000000000001 [ 44.565120][ C0] x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 [ 44.567311][ C0] x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 [ 44.569555][ C0] x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 44.571776][ C0] x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 [ 44.573929][ C0] x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 [ 44.576164][ C0] Call trace: [ 44.577065][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 44.578582][ C0] apply_to_page_range+0x4c/0x64 [ 44.579948][ C0] __change_memory_common+0xac/0x3f8 [ 44.581363][ C0] set_memory_valid+0x68/0x7c [ 44.582828][ C0] kfence_guarded_free+0x278/0x5a8 [ 44.584190][ C0] __kfence_free+0x104/0x198 [ 44.585395][ C0] kmem_cache_free_bulk+0x490/0x51c [ 44.586776][ C0] kfree_skb_list_reason+0x3ac/0x418 [ 44.588210][ C0] __dev_queue_xmit+0x1ac8/0x31f0 [ 44.589669][ C0] lapbeth_data_transmit+0x1fc/0x2a8 [ 44.591122][ C0] lapb_data_transmit+0x8c/0xb0 [ 44.592424][ C0] lapb_transmit_buffer+0x160/0x208 [ 44.593943][ C0] lapb_send_control+0x21c/0x320 [ 44.595278][ C0] lapb_t1timer_expiry+0x490/0x864 [ 44.596769][ C0] call_timer_fn+0x1b4/0x818 [ 44.597999][ C0] __run_timer_base+0x51c/0x76c [ 44.599291][ C0] run_timer_softirq+0xcc/0x194 [ 44.600698][ C0] handle_softirqs+0x328/0xc88 [ 44.601996][ C0] __do_softirq+0x14/0x20 [ 44.603116][ C0] ____do_softirq+0x14/0x20 [ 44.604382][ C0] call_on_irq_stack+0x24/0x30 [ 44.605610][ C0] do_softirq_own_stack+0x20/0x2c [ 44.607008][ C0] __irq_exit_rcu+0x1b0/0x478 [ 44.608367][ C0] irq_exit_rcu+0x14/0x84 [ 44.609578][ C0] el1_interrupt+0x38/0x54 [ 44.610875][ C0] el1h_64_irq_handler+0x18/0x24 [ 44.612295][ C0] el1h_64_irq+0x6c/0x70 [ 44.613440][ C0] arch_local_irq_enable+0x8/0xc (P) [ 44.614864][ C0] do_idle+0x1d8/0x454 [ 44.616080][ C0] cpu_startup_entry+0x5c/0x74 [ 44.617469][ C0] rest_init+0x2d8/0x2f4 [ 44.618642][ C0] start_kernel+0x44c/0x4a8 [ 44.619886][ C0] __primary_switched+0x8c/0x94 [ 44.621244][ C0] irq event stamp: 200551 [ 44.622382][ C0] hardirqs last enabled at (200550): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 44.625236][ C0] hardirqs last disabled at (200551): [] el1_dbg+0x24/0x80 [ 44.627728][ C0] softirqs last enabled at (200494): [] handle_softirqs+0xaf8/0xc88 [ 44.630328][ C0] softirqs last disabled at (200521): [] __do_softirq+0x14/0x20 [ 44.632750][ C0] ---[ end trace 0000000000000000 ]--- [ 44.906165][ C1] ------------[ cut here ]------------ [ 44.906208][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 44.910533][ C1] Modules linked in: [ 44.911499][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 44.914716][ C1] Tainted: [W]=WARN [ 44.915693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.918258][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 44.920250][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 44.921683][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 44.923093][ C1] sp : ffff8000800173e0 [ 44.924177][ C1] x29: ffff800080017500 x28: ffff0001ffa7afff x27: ffff0001fec50fe8 [ 44.926168][ C1] x26: ffff0001ffa7b000 x25: dfff800000000000 x24: ffff0001ffa7a000 [ 44.928241][ C1] x23: ffff0001fea8e3d0 x22: 0000000000000300 x21: ffff0000c1a0db80 [ 44.930287][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 000000000d1ab986 [ 44.932282][ C1] x17: dfff800000000000 x16: ffff80008adb82bc x15: ffff700010002ec4 [ 44.934305][ C1] x14: 1ffff00010002ec4 x13: 0000000000000004 x12: ffffffffffffffff [ 44.936277][ C1] x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 [ 44.938277][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 44.940324][ C1] x5 : 0000000000000001 x4 : ffff8000800175e0 x3 : ffff8000802595f4 [ 44.942343][ C1] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 44.944356][ C1] Call trace: [ 44.945170][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 44.946664][ C1] apply_to_page_range+0x4c/0x64 [ 44.947966][ C1] __change_memory_common+0xac/0x3f8 [ 44.949349][ C1] set_memory_valid+0x68/0x7c [ 44.950532][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 44.951971][ C1] __kfence_alloc+0x394/0x45c [ 44.953212][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 44.954880][ C1] __alloc_skb+0x144/0x2ec [ 44.956102][ C1] lapb_send_control+0x48/0x320 [ 44.957435][ C1] lapb_t1timer_expiry+0x490/0x864 [ 44.958885][ C1] call_timer_fn+0x1b4/0x818 [ 44.960108][ C1] __run_timer_base+0x51c/0x76c [ 44.961451][ C1] run_timer_softirq+0xcc/0x194 [ 44.962790][ C1] handle_softirqs+0x328/0xc88 [ 44.964191][ C1] __do_softirq+0x14/0x20 [ 44.965340][ C1] ____do_softirq+0x14/0x20 [ 44.966567][ C1] call_on_irq_stack+0x24/0x30 [ 44.967783][ C1] do_softirq_own_stack+0x20/0x2c [ 44.969044][ C1] __irq_exit_rcu+0x1b0/0x478 [ 44.970284][ C1] irq_exit_rcu+0x14/0x84 [ 44.971397][ C1] el1_interrupt+0x38/0x54 [ 44.972532][ C1] el1h_64_irq_handler+0x18/0x24 [ 44.973652][ C1] el1h_64_irq+0x6c/0x70 [ 44.974529][ C1] arch_local_irq_enable+0x8/0xc (P) [ 44.975683][ C1] do_idle+0x1d8/0x454 [ 44.976590][ C1] cpu_startup_entry+0x5c/0x74 [ 44.977597][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 44.978903][ C1] __secondary_switched+0xc0/0xc4 [ 44.980207][ C1] irq event stamp: 184051 [ 44.981304][ C1] hardirqs last enabled at (184050): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 44.984089][ C1] hardirqs last disabled at (184051): [] kfence_guarded_alloc+0x190/0xb08 [ 44.986721][ C1] softirqs last enabled at (184034): [] handle_softirqs+0xaf8/0xc88 [ 44.989317][ C1] softirqs last disabled at (184041): [] __do_softirq+0x14/0x20 [ 44.991657][ C1] ---[ end trace 0000000000000000 ]--- [ 44.993066][ C1] ------------[ cut here ]------------ [ 44.993080][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 44.997314][ C1] Modules linked in: [ 44.998377][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 45.001721][ C1] Tainted: [W]=WARN [ 45.002728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.005366][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.007343][ C1] pc : change_page_range+0x188/0x1cc [ 45.008761][ C1] lr : change_page_range+0x188/0x1cc [ 45.010159][ C1] sp : ffff8000800173a0 [ 45.011332][ C1] x29: ffff8000800173a0 x28: ffff0001ffa7afff x27: ffff0001fec50fe8 [ 45.013350][ C1] x26: ffff0001ffa7b000 x25: ffff0001ffa7a000 x24: ffff0001ffa7a000 [ 45.015349][ C1] x23: 006800023fa7a707 x22: 0040000000000001 x21: dfff800000000000 [ 45.017369][ C1] x20: 0000000000000300 x19: ffff0000c1a0db80 x18: 000000000d1ab986 [ 45.019505][ C1] x17: dfff800000000000 x16: ffff80008adb82bc x15: 0000000000000001 [ 45.021574][ C1] x14: 1fffe00018341b70 x13: 0000000000000000 x12: 0000000000000000 [ 45.023713][ C1] x11: ffff600018341b71 x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.025784][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 45.027919][ C1] x5 : 0000000000000001 x4 : ffff8000800175e0 x3 : ffff800080ac62d0 [ 45.030071][ C1] x2 : ffff8000800175e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 45.032206][ C1] Call trace: [ 45.033013][ C1] change_page_range+0x188/0x1cc (P) [ 45.034372][ C1] __apply_to_page_range+0xd58/0x13e4 [ 45.035796][ C1] apply_to_page_range+0x4c/0x64 [ 45.037060][ C1] __change_memory_common+0xac/0x3f8 [ 45.038453][ C1] set_memory_valid+0x68/0x7c [ 45.039659][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 45.041072][ C1] __kfence_alloc+0x394/0x45c [ 45.042234][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 45.043783][ C1] __alloc_skb+0x144/0x2ec [ 45.044981][ C1] lapb_send_control+0x48/0x320 [ 45.046293][ C1] lapb_t1timer_expiry+0x490/0x864 [ 45.047694][ C1] call_timer_fn+0x1b4/0x818 [ 45.048915][ C1] __run_timer_base+0x51c/0x76c [ 45.050129][ C1] run_timer_softirq+0xcc/0x194 [ 45.051410][ C1] handle_softirqs+0x328/0xc88 [ 45.052591][ C1] __do_softirq+0x14/0x20 [ 45.053731][ C1] ____do_softirq+0x14/0x20 [ 45.054987][ C1] call_on_irq_stack+0x24/0x30 [ 45.056218][ C1] do_softirq_own_stack+0x20/0x2c [ 45.057591][ C1] __irq_exit_rcu+0x1b0/0x478 [ 45.058824][ C1] irq_exit_rcu+0x14/0x84 [ 45.059959][ C1] el1_interrupt+0x38/0x54 [ 45.061084][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.062425][ C1] el1h_64_irq+0x6c/0x70 [ 45.063525][ C1] arch_local_irq_enable+0x8/0xc (P) [ 45.064983][ C1] do_idle+0x1d8/0x454 [ 45.066003][ C1] cpu_startup_entry+0x5c/0x74 [ 45.067239][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 45.068611][ C1] __secondary_switched+0xc0/0xc4 [ 45.070000][ C1] irq event stamp: 184051 [ 45.071092][ C1] hardirqs last enabled at (184050): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.073864][ C1] hardirqs last disabled at (184051): [] kfence_guarded_alloc+0x190/0xb08 [ 45.076453][ C1] softirqs last enabled at (184034): [] handle_softirqs+0xaf8/0xc88 [ 45.078845][ C1] softirqs last disabled at (184041): [] __do_softirq+0x14/0x20 [ 45.081246][ C1] ---[ end trace 0000000000000000 ]--- [ 45.082887][ C1] ------------[ cut here ]------------ [ 45.082910][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 45.087290][ C1] Modules linked in: [ 45.088339][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 45.091585][ C1] Tainted: [W]=WARN [ 45.092587][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.095273][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.097252][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 45.098800][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 45.100341][ C1] sp : ffff800080017120 [ 45.101409][ C1] x29: ffff800080017240 x28: ffff0001ffa7afff x27: ffff0001fec50fe8 [ 45.103499][ C1] x26: ffff0001ffa7b000 x25: dfff800000000000 x24: ffff0001ffa7a000 [ 45.105502][ C1] x23: ffff0001fea8e3d0 x22: 0000000000000500 x21: ffff0000c1a0db80 [ 45.107683][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 000000000d1ab986 [ 45.109776][ C1] x17: 0000000000a000ae x16: ffff80008051bab8 x15: 0000000000000001 [ 45.111874][ C1] x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 [ 45.113909][ C1] x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.115935][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 45.118012][ C1] x5 : 0000000000000001 x4 : ffff800080017320 x3 : ffff8000802595f4 [ 45.120054][ C1] x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 [ 45.122060][ C1] Call trace: [ 45.122903][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 45.124386][ C1] apply_to_page_range+0x4c/0x64 [ 45.125771][ C1] __change_memory_common+0xac/0x3f8 [ 45.127183][ C1] set_memory_valid+0x68/0x7c [ 45.128407][ C1] kfence_guarded_free+0x278/0x5a8 [ 45.129785][ C1] __kfence_free+0x104/0x198 [ 45.130924][ C1] kmem_cache_free+0x250/0x550 [ 45.132119][ C1] kfree_skbmem+0x14c/0x1dc [ 45.133289][ C1] consume_skb+0xb8/0x130 [ 45.134453][ C1] ifb_xmit+0x174/0x53c [ 45.135546][ C1] dev_hard_start_xmit+0x2b0/0x8ac [ 45.136887][ C1] sch_direct_xmit+0x1fc/0x468 [ 45.138133][ C1] __dev_queue_xmit+0x13b4/0x31f0 [ 45.139415][ C1] lapbeth_data_transmit+0x1fc/0x2a8 [ 45.140834][ C1] lapb_data_transmit+0x8c/0xb0 [ 45.142119][ C1] lapb_transmit_buffer+0x160/0x208 [ 45.143568][ C1] lapb_send_control+0x21c/0x320 [ 45.144904][ C1] lapb_t1timer_expiry+0x490/0x864 [ 45.146234][ C1] call_timer_fn+0x1b4/0x818 [ 45.147404][ C1] __run_timer_base+0x51c/0x76c [ 45.148645][ C1] run_timer_softirq+0xcc/0x194 [ 45.149913][ C1] handle_softirqs+0x328/0xc88 [ 45.151204][ C1] __do_softirq+0x14/0x20 [ 45.152423][ C1] ____do_softirq+0x14/0x20 [ 45.153604][ C1] call_on_irq_stack+0x24/0x30 [ 45.154859][ C1] do_softirq_own_stack+0x20/0x2c [ 45.156060][ C1] __irq_exit_rcu+0x1b0/0x478 [ 45.157337][ C1] irq_exit_rcu+0x14/0x84 [ 45.158434][ C1] el1_interrupt+0x38/0x54 [ 45.159592][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.160875][ C1] el1h_64_irq+0x6c/0x70 [ 45.162011][ C1] arch_local_irq_enable+0x8/0xc (P) [ 45.163378][ C1] do_idle+0x1d8/0x454 [ 45.164481][ C1] cpu_startup_entry+0x5c/0x74 [ 45.165799][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 45.167230][ C1] __secondary_switched+0xc0/0xc4 [ 45.168538][ C1] irq event stamp: 184073 [ 45.169654][ C1] hardirqs last enabled at (184072): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.172523][ C1] hardirqs last disabled at (184073): [] el1_dbg+0x24/0x80 [ 45.174873][ C1] softirqs last enabled at (184034): [] handle_softirqs+0xaf8/0xc88 [ 45.177344][ C1] softirqs last disabled at (184041): [] __do_softirq+0x14/0x20 [ 45.179747][ C1] ---[ end trace 0000000000000000 ]--- [ 45.466185][ C1] ------------[ cut here ]------------ [ 45.466220][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 45.470445][ C1] Modules linked in: [ 45.471438][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 45.474768][ C1] Tainted: [W]=WARN [ 45.475706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.478270][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.480253][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 45.481756][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 45.483214][ C1] sp : ffff8000800173e0 [ 45.484334][ C1] x29: ffff800080017500 x28: ffff0001ffa7cfff x27: ffff0001fec50fe8 [ 45.486427][ C1] x26: ffff0001ffa7d000 x25: dfff800000000000 x24: ffff0001ffa7c000 [ 45.488454][ C1] x23: ffff0001fea8e3e0 x22: 0000000000000300 x21: ffff0000c1a0db80 [ 45.490511][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 45.492567][ C1] x17: ffff80010d10c000 x16: ffff80008adb82bc x15: ffff700010002ec4 [ 45.494614][ C1] x14: 1ffff00010002ec4 x13: 0000000000000004 x12: ffffffffffffffff [ 45.496633][ C1] x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.498738][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 45.500765][ C1] x5 : 0000000000000001 x4 : ffff8000800175e0 x3 : ffff8000802595f4 [ 45.502825][ C1] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 45.504896][ C1] Call trace: [ 45.505725][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 45.507224][ C1] apply_to_page_range+0x4c/0x64 [ 45.508470][ C1] __change_memory_common+0xac/0x3f8 [ 45.509909][ C1] set_memory_valid+0x68/0x7c [ 45.511102][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 45.512431][ C1] __kfence_alloc+0x394/0x45c [ 45.513719][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 45.515315][ C1] __alloc_skb+0x144/0x2ec [ 45.516484][ C1] lapb_send_control+0x48/0x320 [ 45.517818][ C1] lapb_t1timer_expiry+0x490/0x864 [ 45.519246][ C1] call_timer_fn+0x1b4/0x818 [ 45.520531][ C1] __run_timer_base+0x51c/0x76c [ 45.521968][ C1] run_timer_softirq+0xcc/0x194 [ 45.523295][ C1] handle_softirqs+0x328/0xc88 [ 45.524544][ C1] __do_softirq+0x14/0x20 [ 45.525874][ C1] ____do_softirq+0x14/0x20 [ 45.527185][ C1] call_on_irq_stack+0x24/0x30 [ 45.528502][ C1] do_softirq_own_stack+0x20/0x2c [ 45.529897][ C1] __irq_exit_rcu+0x1b0/0x478 [ 45.531120][ C1] irq_exit_rcu+0x14/0x84 [ 45.532294][ C1] el1_interrupt+0x38/0x54 [ 45.533385][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.534772][ C1] el1h_64_irq+0x6c/0x70 [ 45.535918][ C1] arch_local_irq_enable+0x8/0xc (P) [ 45.537376][ C1] do_idle+0x1d8/0x454 [ 45.538521][ C1] cpu_startup_entry+0x5c/0x74 [ 45.539819][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 45.541256][ C1] __secondary_switched+0xc0/0xc4 [ 45.542618][ C1] irq event stamp: 184695 [ 45.543694][ C1] hardirqs last enabled at (184694): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.546422][ C1] hardirqs last disabled at (184695): [] kfence_guarded_alloc+0x190/0xb08 [ 45.549146][ C1] softirqs last enabled at (184678): [] handle_softirqs+0xaf8/0xc88 [ 45.551722][ C1] softirqs last disabled at (184685): [] __do_softirq+0x14/0x20 [ 45.554158][ C1] ---[ end trace 0000000000000000 ]--- [ 45.555616][ C1] ------------[ cut here ]------------ [ 45.555631][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 45.559644][ C1] Modules linked in: [ 45.560696][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 45.564139][ C1] Tainted: [W]=WARN [ 45.565185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.567813][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.569879][ C1] pc : change_page_range+0x188/0x1cc [ 45.571259][ C1] lr : change_page_range+0x188/0x1cc [ 45.572689][ C1] sp : ffff8000800173a0 [ 45.573789][ C1] x29: ffff8000800173a0 x28: ffff0001ffa7cfff x27: ffff0001fec50fe8 [ 45.575901][ C1] x26: ffff0001ffa7d000 x25: ffff0001ffa7c000 x24: ffff0001ffa7c000 [ 45.578100][ C1] x23: 006800023fa7c707 x22: 0040000000000001 x21: dfff800000000000 [ 45.580269][ C1] x20: 0000000000000300 x19: ffff0000c1a0db80 x18: 1fffe0003386f276 [ 45.582362][ C1] x17: ffff80010d10c000 x16: ffff80008adb82bc x15: 0000000000000001 [ 45.584458][ C1] x14: 1fffe00018341b70 x13: 0000000000000000 x12: 0000000000000000 [ 45.586558][ C1] x11: ffff600018341b71 x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.588700][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 45.590884][ C1] x5 : 0000000000000001 x4 : ffff8000800175e0 x3 : ffff800080ac62d0 [ 45.593018][ C1] x2 : ffff8000800175e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 45.595253][ C1] Call trace: [ 45.596099][ C1] change_page_range+0x188/0x1cc (P) [ 45.597529][ C1] __apply_to_page_range+0xd58/0x13e4 [ 45.598959][ C1] apply_to_page_range+0x4c/0x64 [ 45.600304][ C1] __change_memory_common+0xac/0x3f8 [ 45.601758][ C1] set_memory_valid+0x68/0x7c [ 45.603035][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 45.604495][ C1] __kfence_alloc+0x394/0x45c [ 45.605857][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 45.607521][ C1] __alloc_skb+0x144/0x2ec [ 45.608711][ C1] lapb_send_control+0x48/0x320 [ 45.610102][ C1] lapb_t1timer_expiry+0x490/0x864 [ 45.611477][ C1] call_timer_fn+0x1b4/0x818 [ 45.612820][ C1] __run_timer_base+0x51c/0x76c [ 45.614090][ C1] run_timer_softirq+0xcc/0x194 [ 45.615490][ C1] handle_softirqs+0x328/0xc88 [ 45.616827][ C1] __do_softirq+0x14/0x20 [ 45.617978][ C1] ____do_softirq+0x14/0x20 [ 45.619202][ C1] call_on_irq_stack+0x24/0x30 [ 45.620445][ C1] do_softirq_own_stack+0x20/0x2c [ 45.621857][ C1] __irq_exit_rcu+0x1b0/0x478 [ 45.623114][ C1] irq_exit_rcu+0x14/0x84 [ 45.624365][ C1] el1_interrupt+0x38/0x54 [ 45.625595][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.626968][ C1] el1h_64_irq+0x6c/0x70 [ 45.628103][ C1] arch_local_irq_enable+0x8/0xc (P) [ 45.629697][ C1] do_idle+0x1d8/0x454 [ 45.630790][ C1] cpu_startup_entry+0x5c/0x74 [ 45.632092][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 45.633548][ C1] __secondary_switched+0xc0/0xc4 [ 45.634847][ C1] irq event stamp: 184695 [ 45.635973][ C1] hardirqs last enabled at (184694): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.638691][ C1] hardirqs last disabled at (184695): [] kfence_guarded_alloc+0x190/0xb08 [ 45.641380][ C1] softirqs last enabled at (184678): [] handle_softirqs+0xaf8/0xc88 [ 45.643967][ C1] softirqs last disabled at (184685): [] __do_softirq+0x14/0x20 [ 45.646309][ C1] ---[ end trace 0000000000000000 ]--- [ 45.647928][ C1] ------------[ cut here ]------------ [ 45.647948][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 45.652270][ C1] Modules linked in: [ 45.653333][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 45.656767][ C1] Tainted: [W]=WARN [ 45.657731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.660481][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 45.662509][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 45.664026][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 45.665517][ C1] sp : ffff800080017160 [ 45.666557][ C1] x29: ffff800080017280 x28: ffff0001ffa7cfff x27: ffff0001fec50fe8 [ 45.668713][ C1] x26: ffff0001ffa7d000 x25: dfff800000000000 x24: ffff0001ffa7c000 [ 45.670809][ C1] x23: ffff0001fea8e3e0 x22: 0000000000000500 x21: ffff0000c1a0db80 [ 45.672964][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 45.675272][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 45.677545][ C1] x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 [ 45.679663][ C1] x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 [ 45.681821][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 45.683919][ C1] x5 : 0000000000000001 x4 : ffff800080017360 x3 : ffff8000802595f4 [ 45.686041][ C1] x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 [ 45.688111][ C1] Call trace: [ 45.688973][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 45.690473][ C1] apply_to_page_range+0x4c/0x64 [ 45.691771][ C1] __change_memory_common+0xac/0x3f8 [ 45.693264][ C1] set_memory_valid+0x68/0x7c [ 45.694472][ C1] kfence_guarded_free+0x278/0x5a8 [ 45.695865][ C1] __kfence_free+0x104/0x198 [ 45.697254][ C1] kmem_cache_free_bulk+0x490/0x51c [ 45.698603][ C1] kfree_skb_list_reason+0x3ac/0x418 [ 45.700010][ C1] __dev_queue_xmit+0x1ac8/0x31f0 [ 45.701299][ C1] lapbeth_data_transmit+0x1fc/0x2a8 [ 45.702670][ C1] lapb_data_transmit+0x8c/0xb0 [ 45.703902][ C1] lapb_transmit_buffer+0x160/0x208 [ 45.705281][ C1] lapb_send_control+0x21c/0x320 [ 45.706593][ C1] lapb_t1timer_expiry+0x490/0x864 [ 45.708053][ C1] call_timer_fn+0x1b4/0x818 [ 45.709284][ C1] __run_timer_base+0x51c/0x76c [ 45.710605][ C1] run_timer_softirq+0xcc/0x194 [ 45.711930][ C1] handle_softirqs+0x328/0xc88 [ 45.713170][ C1] __do_softirq+0x14/0x20 [ 45.714310][ C1] ____do_softirq+0x14/0x20 [ 45.715483][ C1] call_on_irq_stack+0x24/0x30 [ 45.716779][ C1] do_softirq_own_stack+0x20/0x2c [ 45.718213][ C1] __irq_exit_rcu+0x1b0/0x478 [ 45.719561][ C1] irq_exit_rcu+0x14/0x84 [ 45.720668][ C1] el1_interrupt+0x38/0x54 [ 45.721906][ C1] el1h_64_irq_handler+0x18/0x24 [ 45.723193][ C1] el1h_64_irq+0x6c/0x70 [ 45.724336][ C1] arch_local_irq_enable+0x8/0xc (P) [ 45.725730][ C1] do_idle+0x1d8/0x454 [ 45.726875][ C1] cpu_startup_entry+0x5c/0x74 [ 45.728128][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 45.729626][ C1] __secondary_switched+0xc0/0xc4 [ 45.730959][ C1] irq event stamp: 184707 [ 45.732157][ C1] hardirqs last enabled at (184706): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.735013][ C1] hardirqs last disabled at (184707): [] el1_dbg+0x24/0x80 [ 45.737287][ C1] softirqs last enabled at (184678): [] handle_softirqs+0xaf8/0xc88 [ 45.739823][ C1] softirqs last disabled at (184685): [] __do_softirq+0x14/0x20 [ 45.742276][ C1] ---[ end trace 0000000000000000 ]--- [ 46.339628][ C0] ------------[ cut here ]------------ [ 46.339664][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 46.344025][ C0] Modules linked in: [ 46.345031][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 46.348296][ C0] Tainted: [W]=WARN [ 46.349354][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.351883][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.353861][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 46.355299][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 46.356737][ C0] sp : ffff800080006f80 [ 46.357790][ C0] x29: ffff8000800070a0 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 [ 46.359825][ C0] x26: ffff0001ffa7f000 x25: dfff800000000000 x24: ffff0001ffa7e000 [ 46.361850][ C0] x23: ffff0001fea8e3f0 x22: 0000000000000100 x21: ffff80008f346040 [ 46.363862][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 [ 46.365853][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 [ 46.367896][ C0] x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff [ 46.369899][ C0] x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 46.371911][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 46.373914][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 [ 46.375952][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 46.377955][ C0] Call trace: [ 46.378764][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 46.380219][ C0] apply_to_page_range+0x4c/0x64 [ 46.381519][ C0] __change_memory_common+0xac/0x3f8 [ 46.382930][ C0] set_memory_valid+0x68/0x7c [ 46.384129][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 46.385437][ C0] __kfence_alloc+0x394/0x45c [ 46.386638][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 46.388198][ C0] kmalloc_reserve+0xc4/0x268 [ 46.389434][ C0] __alloc_skb+0x170/0x2ec [ 46.390555][ C0] napi_alloc_skb+0xa0/0x5fc [ 46.391730][ C0] gve_rx_copy_data+0x40/0x1a0 [ 46.393042][ C0] gve_rx_copy+0x8c/0xe8 [ 46.394162][ C0] gve_rx_poll+0xa08/0x365c [ 46.395340][ C0] gve_napi_poll+0x140/0x3ac [ 46.396511][ C0] __napi_poll+0xb4/0x3fc [ 46.397668][ C0] net_rx_action+0x5d4/0xcc8 [ 46.398834][ C0] handle_softirqs+0x328/0xc88 [ 46.400036][ C0] __do_softirq+0x14/0x20 [ 46.401149][ C0] ____do_softirq+0x14/0x20 [ 46.402323][ C0] call_on_irq_stack+0x24/0x30 [ 46.403536][ C0] do_softirq_own_stack+0x20/0x2c [ 46.404831][ C0] __irq_exit_rcu+0x1b0/0x478 [ 46.406044][ C0] irq_exit_rcu+0x14/0x84 [ 46.407170][ C0] el1_interrupt+0x38/0x54 [ 46.408293][ C0] el1h_64_irq_handler+0x18/0x24 [ 46.409611][ C0] el1h_64_irq+0x6c/0x70 [ 46.410730][ C0] arch_local_irq_enable+0x8/0xc (P) [ 46.412138][ C0] do_idle+0x1d8/0x454 [ 46.413178][ C0] cpu_startup_entry+0x5c/0x74 [ 46.414394][ C0] rest_init+0x2d8/0x2f4 [ 46.415540][ C0] start_kernel+0x44c/0x4a8 [ 46.416705][ C0] __primary_switched+0x8c/0x94 [ 46.417980][ C0] irq event stamp: 201465 [ 46.419149][ C0] hardirqs last enabled at (201464): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 46.421844][ C0] hardirqs last disabled at (201465): [] kfence_guarded_alloc+0x190/0xb08 [ 46.424486][ C0] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 [ 46.427000][ C0] softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 [ 46.429393][ C0] ---[ end trace 0000000000000000 ]--- [ 46.430786][ C0] ------------[ cut here ]------------ [ 46.430800][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 46.434982][ C0] Modules linked in: [ 46.435974][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 46.439290][ C0] Tainted: [W]=WARN [ 46.440259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.442833][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.444940][ C0] pc : change_page_range+0x188/0x1cc [ 46.446285][ C0] lr : change_page_range+0x188/0x1cc [ 46.447701][ C0] sp : ffff800080006f40 [ 46.448752][ C0] x29: ffff800080006f40 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 [ 46.450843][ C0] x26: ffff0001ffa7f000 x25: ffff0001ffa7e000 x24: ffff0001ffa7e000 [ 46.452875][ C0] x23: 006800023fa7e707 x22: 0040000000000001 x21: dfff800000000000 [ 46.454883][ C0] x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 [ 46.456941][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 [ 46.458978][ C0] x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 [ 46.461005][ C0] x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 [ 46.463079][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 46.465207][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 [ 46.467281][ C0] x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 [ 46.469423][ C0] Call trace: [ 46.470299][ C0] change_page_range+0x188/0x1cc (P) [ 46.471691][ C0] __apply_to_page_range+0xd58/0x13e4 [ 46.473119][ C0] apply_to_page_range+0x4c/0x64 [ 46.474420][ C0] __change_memory_common+0xac/0x3f8 [ 46.475853][ C0] set_memory_valid+0x68/0x7c [ 46.477057][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 46.478421][ C0] __kfence_alloc+0x394/0x45c [ 46.479687][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 46.481250][ C0] kmalloc_reserve+0xc4/0x268 [ 46.482450][ C0] __alloc_skb+0x170/0x2ec [ 46.483687][ C0] napi_alloc_skb+0xa0/0x5fc [ 46.484916][ C0] gve_rx_copy_data+0x40/0x1a0 [ 46.486168][ C0] gve_rx_copy+0x8c/0xe8 [ 46.487325][ C0] gve_rx_poll+0xa08/0x365c [ 46.488557][ C0] gve_napi_poll+0x140/0x3ac [ 46.489794][ C0] __napi_poll+0xb4/0x3fc [ 46.490937][ C0] net_rx_action+0x5d4/0xcc8 [ 46.492176][ C0] handle_softirqs+0x328/0xc88 [ 46.493477][ C0] __do_softirq+0x14/0x20 [ 46.494651][ C0] ____do_softirq+0x14/0x20 [ 46.495854][ C0] call_on_irq_stack+0x24/0x30 [ 46.497084][ C0] do_softirq_own_stack+0x20/0x2c [ 46.498460][ C0] __irq_exit_rcu+0x1b0/0x478 [ 46.499712][ C0] irq_exit_rcu+0x14/0x84 [ 46.501017][ C0] el1_interrupt+0x38/0x54 [ 46.502277][ C0] el1h_64_irq_handler+0x18/0x24 [ 46.503631][ C0] el1h_64_irq+0x6c/0x70 [ 46.504737][ C0] arch_local_irq_enable+0x8/0xc (P) [ 46.506111][ C0] do_idle+0x1d8/0x454 [ 46.507211][ C0] cpu_startup_entry+0x5c/0x74 [ 46.508609][ C0] rest_init+0x2d8/0x2f4 [ 46.509875][ C0] start_kernel+0x44c/0x4a8 [ 46.511148][ C0] __primary_switched+0x8c/0x94 [ 46.512497][ C0] irq event stamp: 201465 [ 46.513657][ C0] hardirqs last enabled at (201464): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 46.516423][ C0] hardirqs last disabled at (201465): [] kfence_guarded_alloc+0x190/0xb08 [ 46.519068][ C0] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 [ 46.521626][ C0] softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 [ 46.524081][ C0] ---[ end trace 0000000000000000 ]--- [ 46.525945][ C0] ------------[ cut here ]------------ [ 46.525968][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 46.530350][ C0] Modules linked in: [ 46.531527][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 46.534867][ C0] Tainted: [W]=WARN [ 46.535856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.538550][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.540588][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 46.542218][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 46.543738][ C0] sp : ffff800080006b20 [ 46.544814][ C0] x29: ffff800080006c40 x28: ffff0001ffa7efff x27: ffff0001fec50fe8 [ 46.546908][ C0] x26: ffff0001ffa7f000 x25: dfff800000000000 x24: ffff0001ffa7e000 [ 46.549116][ C0] x23: ffff0001fea8e3f0 x22: 0000000000000100 x21: ffff80008f346040 [ 46.551272][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 46.553436][ C0] x17: ffff800092f37000 x16: ffff80008051bab8 x15: 0000000000000001 [ 46.555560][ C0] x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 [ 46.557735][ C0] x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 46.559919][ C0] x8 : ffff80008f346040 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 46.562103][ C0] x5 : 0000000000000001 x4 : ffff800080006d20 x3 : ffff8000802595f4 [ 46.564288][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 46.566469][ C0] Call trace: [ 46.567349][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 46.568897][ C0] apply_to_page_range+0x4c/0x64 [ 46.570223][ C0] __change_memory_common+0xac/0x3f8 [ 46.571623][ C0] set_memory_valid+0x68/0x7c [ 46.572908][ C0] kfence_guarded_free+0x278/0x5a8 [ 46.574282][ C0] __kfence_free+0x104/0x198 [ 46.575588][ C0] kmem_cache_free+0x250/0x550 [ 46.576879][ C0] skb_free_head+0xbc/0x198 [ 46.578137][ C0] skb_release_data+0x66c/0x820 [ 46.579431][ C0] consume_skb+0xb0/0x130 [ 46.580547][ C0] tcp_rcv_state_process+0x1288/0x3630 [ 46.582086][ C0] tcp_v4_do_rcv+0x704/0xbc4 [ 46.583300][ C0] tcp_v4_rcv+0x1dd0/0x28b8 [ 46.584434][ C0] ip_protocol_deliver_rcu+0x1f8/0x484 [ 46.585887][ C0] ip_local_deliver_finish+0x27c/0x4e8 [ 46.587332][ C0] NF_HOOK+0x2c4/0x358 [ 46.588437][ C0] ip_local_deliver+0x120/0x194 [ 46.589692][ C0] ip_sublist_rcv+0x8a0/0xb68 [ 46.590931][ C0] ip_list_rcv+0x398/0x3ec [ 46.592057][ C0] __netif_receive_skb_list_core+0x4e4/0x67c [ 46.593708][ C0] netif_receive_skb_list_internal+0x74c/0x9e0 [ 46.595417][ C0] napi_complete_done+0x250/0x614 [ 46.596779][ C0] gve_napi_poll+0x1f4/0x3ac [ 46.597990][ C0] __napi_poll+0xb4/0x3fc [ 46.599155][ C0] net_rx_action+0x5d4/0xcc8 [ 46.600409][ C0] handle_softirqs+0x328/0xc88 [ 46.601770][ C0] __do_softirq+0x14/0x20 [ 46.603041][ C0] ____do_softirq+0x14/0x20 [ 46.604222][ C0] call_on_irq_stack+0x24/0x30 [ 46.605486][ C0] do_softirq_own_stack+0x20/0x2c [ 46.606827][ C0] __irq_exit_rcu+0x1b0/0x478 [ 46.608087][ C0] irq_exit_rcu+0x14/0x84 [ 46.609293][ C0] el1_interrupt+0x38/0x54 [ 46.610424][ C0] el1h_64_irq_handler+0x18/0x24 [ 46.611779][ C0] el1h_64_irq+0x6c/0x70 [ 46.612908][ C0] arch_local_irq_enable+0x8/0xc (P) [ 46.614413][ C0] do_idle+0x1d8/0x454 [ 46.615456][ C0] cpu_startup_entry+0x5c/0x74 [ 46.616715][ C0] rest_init+0x2d8/0x2f4 [ 46.617892][ C0] start_kernel+0x44c/0x4a8 [ 46.619240][ C0] __primary_switched+0x8c/0x94 [ 46.620526][ C0] irq event stamp: 201497 [ 46.621694][ C0] hardirqs last enabled at (201496): [] el1_interrupt+0x44/0x54 [ 46.624189][ C0] hardirqs last disabled at (201497): [] el1_dbg+0x24/0x80 [ 46.626610][ C0] softirqs last enabled at (201448): [] handle_softirqs+0xaf8/0xc88 [ 46.629203][ C0] softirqs last disabled at (201455): [] __do_softirq+0x14/0x20 [ 46.631706][ C0] ---[ end trace 0000000000000000 ]--- [ 46.935939][ C0] ------------[ cut here ]------------ [ 46.935977][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 46.940460][ C0] Modules linked in: [ 46.941482][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 46.944845][ C0] Tainted: [W]=WARN [ 46.945896][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.948595][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 46.950650][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 46.952188][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 46.953688][ C0] sp : ffff800080006f40 [ 46.954746][ C0] x29: ffff800080007060 x28: ffff0001ffa80fff x27: ffff0001fec50fe8 [ 46.956941][ C0] x26: ffff0001ffa81000 x25: dfff800000000000 x24: ffff0001ffa80000 [ 46.959090][ C0] x23: ffff0001fea8e400 x22: 0000000000000100 x21: ffff80008f346040 [ 46.961233][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386aa76 [ 46.963314][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e30 [ 46.965397][ C0] x14: 1ffff00010000e30 x13: 0000000000000004 x12: ffffffffffffffff [ 46.967466][ C0] x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 46.969511][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 46.971623][ C0] x5 : 0000000000000001 x4 : ffff800080007140 x3 : ffff8000802595f4 [ 46.973696][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 46.975790][ C0] Call trace: [ 46.976631][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 46.978177][ C0] apply_to_page_range+0x4c/0x64 [ 46.979580][ C0] __change_memory_common+0xac/0x3f8 [ 46.981022][ C0] set_memory_valid+0x68/0x7c [ 46.982242][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 46.983743][ C0] __kfence_alloc+0x394/0x45c [ 46.985120][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 46.986780][ C0] kmalloc_reserve+0xc4/0x268 [ 46.988121][ C0] __alloc_skb+0x170/0x2ec [ 46.989399][ C0] napi_alloc_skb+0xa0/0x5fc [ 46.990737][ C0] napi_get_frags+0x74/0x144 [ 46.992034][ C0] gve_rx_add_frags+0x1a0/0x3d8 [ 46.993476][ C0] gve_rx_poll+0xf14/0x365c [ 46.994752][ C0] gve_napi_poll+0x140/0x3ac [ 46.996135][ C0] __napi_poll+0xb4/0x3fc [ 46.997354][ C0] net_rx_action+0x5d4/0xcc8 [ 46.998648][ C0] handle_softirqs+0x328/0xc88 [ 47.000072][ C0] __do_softirq+0x14/0x20 [ 47.001402][ C0] ____do_softirq+0x14/0x20 [ 47.002724][ C0] call_on_irq_stack+0x24/0x30 [ 47.004062][ C0] do_softirq_own_stack+0x20/0x2c [ 47.005477][ C0] __irq_exit_rcu+0x1b0/0x478 [ 47.006850][ C0] irq_exit_rcu+0x14/0x84 [ 47.008104][ C0] el1_interrupt+0x38/0x54 [ 47.009354][ C0] el1h_64_irq_handler+0x18/0x24 [ 47.010719][ C0] el1h_64_irq+0x6c/0x70 [ 47.011937][ C0] arch_local_irq_enable+0x8/0xc (P) [ 47.013442][ C0] do_idle+0x1d8/0x454 [ 47.014599][ C0] cpu_startup_entry+0x5c/0x74 [ 47.016010][ C0] rest_init+0x2d8/0x2f4 [ 47.017229][ C0] start_kernel+0x44c/0x4a8 [ 47.018563][ C0] __primary_switched+0x8c/0x94 [ 47.020132][ C0] irq event stamp: 203529 [ 47.021388][ C0] hardirqs last enabled at (203528): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 47.024488][ C0] hardirqs last disabled at (203529): [] kfence_guarded_alloc+0x190/0xb08 [ 47.027293][ C0] softirqs last enabled at (203512): [] handle_softirqs+0xaf8/0xc88 [ 47.030007][ C0] softirqs last disabled at (203519): [] __do_softirq+0x14/0x20 [ 47.032467][ C0] ---[ end trace 0000000000000000 ]--- [ 47.033972][ C0] ------------[ cut here ]------------ [ 47.033991][ C0] WARNING: CPU: 0 PID: 0 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 47.038426][ C0] Modules linked in: [ 47.039492][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 47.043025][ C0] Tainted: [W]=WARN [ 47.044052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.046823][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.049000][ C0] pc : change_page_range+0x188/0x1cc [ 47.050439][ C0] lr : change_page_range+0x188/0x1cc [ 47.051883][ C0] sp : ffff800080006f00 [ 47.053051][ C0] x29: ffff800080006f00 x28: ffff0001ffa80fff x27: ffff0001fec50fe8 [ 47.055266][ C0] x26: ffff0001ffa81000 x25: ffff0001ffa80000 x24: ffff0001ffa80000 [ 47.057438][ C0] x23: 006800023fa80707 x22: 0040000000000001 x21: dfff800000000000 [ 47.059628][ C0] x20: 0000000000000100 x19: ffff80008f346040 x18: 1fffe0003386aa76 [ 47.061762][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 [ 47.063945][ C0] x14: 1ffff00011e68c08 x13: 0000000000000000 x12: 0000000000000000 [ 47.066173][ C0] x11: ffff700011e68c09 x10: 0000000000ff0100 x9 : 0000000000000000 [ 47.068411][ C0] x8 : ffff80008f346040 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 47.070626][ C0] x5 : 0000000000000001 x4 : ffff800080007140 x3 : ffff800080ac62d0 [ 47.072827][ C0] x2 : ffff800080007140 x1 : 0000000000000100 x0 : 0000000000000000 [ 47.075030][ C0] Call trace: [ 47.075899][ C0] change_page_range+0x188/0x1cc (P) [ 47.077364][ C0] __apply_to_page_range+0xd58/0x13e4 [ 47.078932][ C0] apply_to_page_range+0x4c/0x64 [ 47.080340][ C0] __change_memory_common+0xac/0x3f8 [ 47.081802][ C0] set_memory_valid+0x68/0x7c [ 47.083108][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 47.084525][ C0] __kfence_alloc+0x394/0x45c [ 47.085854][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 47.087487][ C0] kmalloc_reserve+0xc4/0x268 [ 47.088842][ C0] __alloc_skb+0x170/0x2ec [ 47.090026][ C0] napi_alloc_skb+0xa0/0x5fc [ 47.091252][ C0] napi_get_frags+0x74/0x144 [ 47.092512][ C0] gve_rx_add_frags+0x1a0/0x3d8 [ 47.093864][ C0] gve_rx_poll+0xf14/0x365c [ 47.095068][ C0] gve_napi_poll+0x140/0x3ac [ 47.096381][ C0] __napi_poll+0xb4/0x3fc [ 47.097598][ C0] net_rx_action+0x5d4/0xcc8 [ 47.098916][ C0] handle_softirqs+0x328/0xc88 [ 47.100209][ C0] __do_softirq+0x14/0x20 [ 47.101402][ C0] ____do_softirq+0x14/0x20 [ 47.102684][ C0] call_on_irq_stack+0x24/0x30 [ 47.104025][ C0] do_softirq_own_stack+0x20/0x2c [ 47.105406][ C0] __irq_exit_rcu+0x1b0/0x478 [ 47.106733][ C0] irq_exit_rcu+0x14/0x84 [ 47.107973][ C0] el1_interrupt+0x38/0x54 [ 47.109223][ C0] el1h_64_irq_handler+0x18/0x24 [ 47.110637][ C0] el1h_64_irq+0x6c/0x70 [ 47.111798][ C0] arch_local_irq_enable+0x8/0xc (P) [ 47.113285][ C0] do_idle+0x1d8/0x454 [ 47.114451][ C0] cpu_startup_entry+0x5c/0x74 [ 47.115771][ C0] rest_init+0x2d8/0x2f4 [ 47.116995][ C0] start_kernel+0x44c/0x4a8 [ 47.118282][ C0] __primary_switched+0x8c/0x94 [ 47.119645][ C0] irq event stamp: 203529 [ 47.120910][ C0] hardirqs last enabled at (203528): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 47.123831][ C0] hardirqs last disabled at (203529): [] kfence_guarded_alloc+0x190/0xb08 [ 47.126742][ C0] softirqs last enabled at (203512): [] handle_softirqs+0xaf8/0xc88 [ 47.129774][ C0] softirqs last disabled at (203519): [] __do_softirq+0x14/0x20 [ 47.132704][ C0] ---[ end trace 0000000000000000 ]--- [ 47.135069][ T6486] ------------[ cut here ]------------ [ 47.135097][ T6486] WARNING: CPU: 0 PID: 6486 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 47.140070][ T6486] Modules linked in: [ 47.141146][ T6486] CPU: 0 UID: 101 PID: 6486 Comm: sshd-session Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 47.144883][ T6486] Tainted: [W]=WARN [ 47.145932][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.148844][ T6486] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.151002][ T6486] pc : __apply_to_page_range+0xdb4/0x13e4 [ 47.152688][ T6486] lr : __apply_to_page_range+0xdb4/0x13e4 [ 47.154276][ T6486] sp : ffff8000a3fb6f40 [ 47.155438][ T6486] x29: ffff8000a3fb7060 x28: ffff0001ffa80fff x27: ffff0001fec50fe8 [ 47.157618][ T6486] x26: ffff0001ffa81000 x25: dfff800000000000 x24: ffff0001ffa80000 [ 47.159917][ T6486] x23: ffff0001fea8e400 x22: 0000000000000200 x21: ffff0000c9d75b80 [ 47.162129][ T6486] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 47.164268][ T6486] x17: 0000000000000000 x16: ffff80008051bab8 x15: 0000000000000001 [ 47.166452][ T6486] x14: 1ffff00012dfb961 x13: 0000000000000000 x12: 0000000000000000 [ 47.168741][ T6486] x11: ffff700012dfb962 x10: 0000000000ff0100 x9 : 0000000000000000 [ 47.170932][ T6486] x8 : ffff0000c9d75b80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 47.173099][ T6486] x5 : 0000000000000001 x4 : ffff8000a3fb7140 x3 : ffff8000802595f4 [ 47.175380][ T6486] x2 : 0000000000001000 x1 : 0000000000000200 x0 : 0000000000000000 [ 47.177597][ T6486] Call trace: [ 47.178578][ T6486] __apply_to_page_range+0xdb4/0x13e4 (P) [ 47.180179][ T6486] apply_to_page_range+0x4c/0x64 [ 47.181586][ T6486] __change_memory_common+0xac/0x3f8 [ 47.183104][ T6486] set_memory_valid+0x68/0x7c [ 47.184371][ T6486] kfence_guarded_free+0x278/0x5a8 [ 47.185791][ T6486] __kfence_free+0x104/0x198 [ 47.187025][ T6486] kmem_cache_free+0x250/0x550 [ 47.188281][ T6486] skb_free_head+0xbc/0x198 [ 47.189552][ T6486] skb_release_data+0x66c/0x820 [ 47.190953][ T6486] skb_attempt_defer_free+0x3a0/0x530 [ 47.192493][ T6486] tcp_recvmsg_locked+0x1c50/0x29fc [ 47.193907][ T6486] tcp_recvmsg+0x18c/0x694 Warning: Permanently added '10.128.10.45' (ED25519) to the list of known hosts. [ 47.195120][ T6486] inet_recvmsg+0x110/0x1b8 [ 47.196346][ T6486] sock_read_iter+0x258/0x33c [ 47.197683][ T6486] vfs_read+0x5fc/0x898 [ 47.198809][ T6486] ksys_read+0x120/0x210 [ 47.200013][ T6486] __arm64_sys_read+0x7c/0x90 [ 47.201238][ T6486] invoke_syscall+0x98/0x2b8 [ 47.202454][ T6486] el0_svc_common+0x1e0/0x23c [ 47.203729][ T6486] do_el0_svc+0x48/0x58 [ 47.204872][ T6486] el0_svc+0x58/0x17c [ 47.205935][ T6486] el0t_64_sync_handler+0x78/0x108 [ 47.207424][ T6486] el0t_64_sync+0x198/0x19c [ 47.208652][ T6486] irq event stamp: 1229 [ 47.209778][ T6486] hardirqs last enabled at (1228): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 47.212906][ T6486] hardirqs last disabled at (1229): [] el1_dbg+0x24/0x80 [ 47.215264][ T6486] softirqs last enabled at (1220): [] lock_sock_nested+0xc8/0x118 [ 47.217933][ T6486] softirqs last disabled at (1224): [] local_bh_disable+0x10/0x34 [ 47.220494][ T6486] ---[ end trace 0000000000000000 ]--- [ 47.558301][ C0] ------------[ cut here ]------------ [ 47.558333][ C0] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 47.562769][ C0] Modules linked in: [ 47.563799][ C0] CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 47.567292][ C0] Tainted: [W]=WARN [ 47.568319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.570941][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.573027][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 47.574504][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 47.576019][ C0] sp : ffff800080006f80 [ 47.577109][ C0] x29: ffff8000800070a0 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 [ 47.579177][ C0] x26: ffff0001ffa8b000 x25: dfff800000000000 x24: ffff0001ffa8a000 [ 47.581283][ C0] x23: ffff0001fea8e450 x22: 0000000000000100 x21: ffff0000cba48000 [ 47.583467][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 47.585579][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000e38 [ 47.587836][ C0] x14: 1ffff00010000e38 x13: 0000000000000004 x12: ffffffffffffffff [ 47.589973][ C0] x11: 000000008e6001b3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 47.592070][ C0] x8 : ffff0000cba48000 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 47.594280][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff8000802595f4 [ 47.596456][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 47.598585][ C0] Call trace: [ 47.599473][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 47.601058][ C0] apply_to_page_range+0x4c/0x64 [ 47.602415][ C0] __change_memory_common+0xac/0x3f8 [ 47.604013][ C0] set_memory_valid+0x68/0x7c [ 47.605394][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 47.606846][ C0] __kfence_alloc+0x394/0x45c [ 47.608095][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 47.609704][ C0] kmalloc_reserve+0xc4/0x268 [ 47.610979][ C0] __alloc_skb+0x170/0x2ec [ 47.612145][ C0] napi_alloc_skb+0xa0/0x5fc [ 47.613398][ C0] gve_rx_copy_data+0x40/0x1a0 [ 47.614710][ C0] gve_rx_copy+0x8c/0xe8 [ 47.615839][ C0] gve_rx_poll+0xa08/0x365c [ 47.617105][ C0] gve_napi_poll+0x140/0x3ac [ 47.618388][ C0] __napi_poll+0xb4/0x3fc [ 47.619611][ C0] net_rx_action+0x5d4/0xcc8 [ 47.620875][ C0] handle_softirqs+0x328/0xc88 [ 47.622205][ C0] __do_softirq+0x14/0x20 [ 47.623402][ C0] ____do_softirq+0x14/0x20 [ 47.624678][ C0] call_on_irq_stack+0x24/0x30 [ 47.625978][ C0] do_softirq_own_stack+0x20/0x2c [ 47.627366][ C0] __irq_exit_rcu+0x1b0/0x478 [ 47.628671][ C0] irq_exit_rcu+0x14/0x84 [ 47.629985][ C0] el1_interrupt+0x38/0x54 [ 47.631212][ C0] el1h_64_irq_handler+0x18/0x24 [ 47.632575][ C0] el1h_64_irq+0x6c/0x70 [ 47.633737][ C0] __sanitizer_cov_trace_pc+0x0/0x84 (P) [ 47.635350][ C0] arch_stack_walk+0x1dc/0x368 [ 47.636619][ C0] return_address+0x94/0x104 [ 47.637863][ C0] preempt_count_add+0xe0/0x310 [ 47.639248][ C0] _raw_spin_lock+0x20/0x60 [ 47.640454][ C0] __pte_offset_map_lock+0xf0/0x1d8 [ 47.641862][ C0] handle_mm_fault+0x3d0c/0x4cf0 [ 47.643259][ C0] do_page_fault+0x428/0x1554 [ 47.644553][ C0] do_translation_fault+0xc4/0x114 [ 47.645988][ C0] do_mem_abort+0x70/0x194 [ 47.647185][ C0] el0_da+0x64/0x160 [ 47.648260][ C0] el0t_64_sync_handler+0x84/0x108 [ 47.649683][ C0] el0t_64_sync+0x198/0x19c [ 47.650898][ C0] irq event stamp: 51989 [ 47.652106][ C0] hardirqs last enabled at (51988): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 47.654901][ C0] hardirqs last disabled at (51989): [] kfence_guarded_alloc+0x190/0xb08 [ 47.657625][ C0] softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 [ 47.660249][ C0] softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 [ 47.662776][ C0] ---[ end trace 0000000000000000 ]--- [ 47.664212][ C0] ------------[ cut here ]------------ [ 47.664227][ C0] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 47.668521][ C0] Modules linked in: [ 47.669682][ C0] CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 47.673213][ C0] Tainted: [W]=WARN [ 47.674326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.677049][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.679100][ C0] pc : change_page_range+0x188/0x1cc [ 47.680583][ C0] lr : change_page_range+0x188/0x1cc [ 47.682031][ C0] sp : ffff800080006f40 [ 47.683218][ C0] x29: ffff800080006f40 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 [ 47.685411][ C0] x26: ffff0001ffa8b000 x25: ffff0001ffa8a000 x24: ffff0001ffa8a000 [ 47.687568][ C0] x23: 006800023fa8a707 x22: 0040000000000001 x21: dfff800000000000 [ 47.689799][ C0] x20: 0000000000000100 x19: ffff0000cba48000 x18: 0000000000000000 [ 47.691945][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 [ 47.694119][ C0] x14: 1fffe00019749000 x13: 0000000000000000 x12: 0000000000000000 [ 47.696319][ C0] x11: ffff600019749001 x10: 0000000000ff0100 x9 : 0000000000000000 [ 47.698526][ C0] x8 : ffff0000cba48000 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 47.700732][ C0] x5 : 0000000000000001 x4 : ffff800080007180 x3 : ffff800080ac62d0 [ 47.702924][ C0] x2 : ffff800080007180 x1 : 0000000000000100 x0 : 0000000000000000 [ 47.705078][ C0] Call trace: [ 47.705971][ C0] change_page_range+0x188/0x1cc (P) [ 47.707442][ C0] __apply_to_page_range+0xd58/0x13e4 [ 47.708996][ C0] apply_to_page_range+0x4c/0x64 [ 47.710351][ C0] __change_memory_common+0xac/0x3f8 [ 47.711791][ C0] set_memory_valid+0x68/0x7c [ 47.713037][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 47.714443][ C0] __kfence_alloc+0x394/0x45c [ 47.715743][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 47.717413][ C0] kmalloc_reserve+0xc4/0x268 [ 47.718679][ C0] __alloc_skb+0x170/0x2ec [ 47.719873][ C0] napi_alloc_skb+0xa0/0x5fc [ 47.721215][ C0] gve_rx_copy_data+0x40/0x1a0 [ 47.722483][ C0] gve_rx_copy+0x8c/0xe8 [ 47.723668][ C0] gve_rx_poll+0xa08/0x365c [ 47.725044][ C0] gve_napi_poll+0x140/0x3ac [ 47.726308][ C0] __napi_poll+0xb4/0x3fc [ 47.727521][ C0] net_rx_action+0x5d4/0xcc8 [ 47.728784][ C0] handle_softirqs+0x328/0xc88 [ 47.730086][ C0] __do_softirq+0x14/0x20 [ 47.731323][ C0] ____do_softirq+0x14/0x20 [ 47.732518][ C0] call_on_irq_stack+0x24/0x30 [ 47.733779][ C0] do_softirq_own_stack+0x20/0x2c [ 47.735110][ C0] __irq_exit_rcu+0x1b0/0x478 [ 47.736373][ C0] irq_exit_rcu+0x14/0x84 [ 47.737635][ C0] el1_interrupt+0x38/0x54 [ 47.738874][ C0] el1h_64_irq_handler+0x18/0x24 [ 47.740220][ C0] el1h_64_irq+0x6c/0x70 [ 47.741401][ C0] __sanitizer_cov_trace_pc+0x0/0x84 (P) [ 47.742995][ C0] arch_stack_walk+0x1dc/0x368 [ 47.744333][ C0] return_address+0x94/0x104 [ 47.745604][ C0] preempt_count_add+0xe0/0x310 [ 47.747006][ C0] _raw_spin_lock+0x20/0x60 [ 47.748221][ C0] __pte_offset_map_lock+0xf0/0x1d8 [ 47.749626][ C0] handle_mm_fault+0x3d0c/0x4cf0 [ 47.751056][ C0] do_page_fault+0x428/0x1554 [ 47.752364][ C0] do_translation_fault+0xc4/0x114 [ 47.753760][ C0] do_mem_abort+0x70/0x194 [ 47.754928][ C0] el0_da+0x64/0x160 [ 47.755978][ C0] el0t_64_sync_handler+0x84/0x108 [ 47.757528][ C0] el0t_64_sync+0x198/0x19c [ 47.758731][ C0] irq event stamp: 51989 [ 47.759869][ C0] hardirqs last enabled at (51988): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 47.762798][ C0] hardirqs last disabled at (51989): [] kfence_guarded_alloc+0x190/0xb08 [ 47.765569][ C0] softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 [ 47.768140][ C0] softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 [ 47.770680][ C0] ---[ end trace 0000000000000000 ]--- [ 47.772509][ C0] ------------[ cut here ]------------ [ 47.772534][ C0] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 47.776962][ C0] Modules linked in: [ 47.778002][ C0] CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 47.781500][ C0] Tainted: [W]=WARN [ 47.782609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.785335][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.787352][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 47.788959][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 47.790529][ C0] sp : ffff800080007160 [ 47.791656][ C0] x29: ffff800080007280 x28: ffff0001ffa8afff x27: ffff0001fec50fe8 [ 47.793910][ C0] x26: ffff0001ffa8b000 x25: dfff800000000000 x24: ffff0001ffa8a000 [ 47.796114][ C0] x23: ffff0001fea8e450 x22: 0000000000000100 x21: ffff0000cba48000 [ 47.798367][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 47.800564][ C0] x17: 0000000000020010 x16: ffff80008051bab8 x15: 0000000000000001 [ 47.802724][ C0] x14: 1ffff00012dfb9f2 x13: 0000000000000000 x12: 0000000000000000 [ 47.805000][ C0] x11: ffff700012dfb9f3 x10: 0000000000ff0100 x9 : 0000000000000000 [ 47.807200][ C0] x8 : ffff0000cba48000 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 47.809338][ C0] x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 [ 47.811579][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 47.813746][ C0] Call trace: [ 47.814684][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 47.816199][ C0] apply_to_page_range+0x4c/0x64 [ 47.817619][ C0] __change_memory_common+0xac/0x3f8 [ 47.819068][ C0] set_memory_valid+0x68/0x7c [ 47.820348][ C0] kfence_guarded_free+0x278/0x5a8 [ 47.821717][ C0] __kfence_free+0x104/0x198 [ 47.822995][ C0] kmem_cache_free+0x250/0x550 [ 47.824286][ C0] skb_free_head+0xbc/0x198 [ 47.825563][ C0] skb_release_data+0x66c/0x820 [ 47.826847][ C0] consume_skb+0xb0/0x130 [ 47.828048][ C0] arp_process+0xb78/0x12b8 [ 47.829269][ C0] NF_HOOK+0x2b8/0x34c [ 47.830425][ C0] arp_rcv+0x2a8/0x430 [ 47.831505][ C0] __netif_receive_skb_list_core+0x60c/0x67c [ 47.833135][ C0] netif_receive_skb_list_internal+0x74c/0x9e0 [ 47.834860][ C0] napi_complete_done+0x250/0x614 [ 47.836242][ C0] gve_napi_poll+0x1f4/0x3ac [ 47.837511][ C0] __napi_poll+0xb4/0x3fc [ 47.838691][ C0] net_rx_action+0x5d4/0xcc8 [ 47.839957][ C0] handle_softirqs+0x328/0xc88 [ 47.841254][ C0] __do_softirq+0x14/0x20 [ 47.842442][ C0] ____do_softirq+0x14/0x20 [ 47.843645][ C0] call_on_irq_stack+0x24/0x30 [ 47.844937][ C0] do_softirq_own_stack+0x20/0x2c [ 47.846308][ C0] __irq_exit_rcu+0x1b0/0x478 [ 47.847551][ C0] irq_exit_rcu+0x14/0x84 [ 47.848732][ C0] el1_interrupt+0x38/0x54 [ 47.849933][ C0] el1h_64_irq_handler+0x18/0x24 [ 47.851229][ C0] el1h_64_irq+0x6c/0x70 [ 47.852375][ C0] __sanitizer_cov_trace_pc+0x0/0x84 (P) [ 47.853961][ C0] arch_stack_walk+0x1dc/0x368 [ 47.855233][ C0] return_address+0x94/0x104 [ 47.856466][ C0] preempt_count_add+0xe0/0x310 [ 47.857829][ C0] _raw_spin_lock+0x20/0x60 [ 47.859049][ C0] __pte_offset_map_lock+0xf0/0x1d8 [ 47.860450][ C0] handle_mm_fault+0x3d0c/0x4cf0 [ 47.861806][ C0] do_page_fault+0x428/0x1554 [ 47.863084][ C0] do_translation_fault+0xc4/0x114 [ 47.864481][ C0] do_mem_abort+0x70/0x194 [ 47.865692][ C0] el0_da+0x64/0x160 [ 47.866787][ C0] el0t_64_sync_handler+0x84/0x108 [ 47.868204][ C0] el0t_64_sync+0x198/0x19c [ 47.869429][ C0] irq event stamp: 52017 [ 47.870578][ C0] hardirqs last enabled at (52016): [] exit_to_kernel_mode+0xc0/0xf0 [ 47.873135][ C0] hardirqs last disabled at (52017): [] el1_dbg+0x24/0x80 [ 47.875533][ C0] softirqs last enabled at (51066): [] local_bh_enable+0x10/0x34 [ 47.878093][ C0] softirqs last disabled at (51979): [] __do_softirq+0x14/0x20 [ 47.880568][ C0] ---[ end trace 0000000000000000 ]--- [ 48.066192][ C1] ------------[ cut here ]------------ [ 48.066230][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 48.070380][ C1] Modules linked in: [ 48.071342][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 48.074561][ C1] Tainted: [W]=WARN [ 48.075543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.078158][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.080188][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 48.081699][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 48.083170][ C1] sp : ffff8000800179c0 [ 48.084207][ C1] x29: ffff800080017ae0 x28: ffff0001ffa90fff x27: ffff0001fec50fe8 [ 48.086282][ C1] x26: ffff0001ffa91000 x25: dfff800000000000 x24: ffff0001ffa90000 [ 48.088384][ C1] x23: ffff0001fea8e480 x22: 0000000000000100 x21: ffff0000c1a0db80 [ 48.090455][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 48.092500][ C1] x17: 0000000000000001 x16: ffff80008051bab8 x15: 0000000000000001 [ 48.094561][ C1] x14: 1ffff00012dfb9dd x13: 0000000000000000 x12: 0000000000000000 [ 48.096643][ C1] x11: ffff700012dfb9de x10: 0000000000ff0100 x9 : 0000000000000000 [ 48.098723][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 48.100800][ C1] x5 : 0000000000000001 x4 : ffff800080017bc0 x3 : ffff8000802595f4 [ 48.102832][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 48.104887][ C1] Call trace: [ 48.105736][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 48.107242][ C1] apply_to_page_range+0x4c/0x64 [ 48.108597][ C1] __change_memory_common+0xac/0x3f8 [ 48.110056][ C1] set_memory_valid+0x68/0x7c [ 48.111401][ C1] kfence_guarded_free+0x278/0x5a8 [ 48.112767][ C1] rcu_guarded_free+0x4c/0x5c [ 48.114016][ C1] rcu_core+0x848/0x17a4 [ 48.115121][ C1] rcu_core_si+0x10/0x1c [ 48.116245][ C1] handle_softirqs+0x328/0xc88 1970/01/01 00:00:47 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:47 ignoring optional flag "type"="gce" [ 48.117556][ C1] __do_softirq+0x14/0x20 [ 48.118739][ C1] ____do_softirq+0x14/0x20 [ 48.119941][ C1] call_on_irq_stack+0x24/0x30 [ 48.121227][ C1] do_softirq_own_stack+0x20/0x2c [ 48.122518][ C1] __irq_exit_rcu+0x1b0/0x478 [ 48.123701][ C1] irq_exit_rcu+0x14/0x84 [ 48.124811][ C1] el1_interrupt+0x38/0x54 [ 48.125942][ C1] el1h_64_irq_handler+0x18/0x24 [ 48.127268][ C1] el1h_64_irq+0x6c/0x70 [ 48.128468][ C1] arch_local_irq_enable+0x8/0xc (P) [ 48.129858][ C1] do_idle+0x1d8/0x454 [ 48.130961][ C1] cpu_startup_entry+0x5c/0x74 [ 48.132236][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 48.133746][ C1] __secondary_switched+0xc0/0xc4 [ 48.135084][ C1] irq event stamp: 192545 [ 48.136266][ C1] hardirqs last enabled at (192544): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 48.139023][ C1] hardirqs last disabled at (192545): [] el1_dbg+0x24/0x80 [ 48.141333][ C1] softirqs last enabled at (192414): [] handle_softirqs+0xaf8/0xc88 [ 48.143992][ C1] softirqs last disabled at (192501): [] __do_softirq+0x14/0x20 [ 48.146498][ C1] ---[ end trace 0000000000000000 ]--- [ 48.336165][ C0] ------------[ cut here ]------------ [ 48.336201][ C0] WARNING: CPU: 0 PID: 6489 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 48.340694][ C0] Modules linked in: [ 48.341793][ C0] CPU: 0 UID: 0 PID: 6489 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 48.345319][ C0] Tainted: [W]=WARN [ 48.346321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.348958][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.351039][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 48.352543][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 48.354071][ C0] sp : ffff8000800079c0 [ 48.355157][ C0] x29: ffff800080007ae0 x28: ffff0001ffa98fff x27: ffff0001fec50fe8 [ 48.357246][ C0] x26: ffff0001ffa99000 x25: dfff800000000000 x24: ffff0001ffa98000 [ 48.359389][ C0] x23: ffff0001fea8e4c0 x22: 0000000000000100 x21: ffff0000cba48000 [ 48.361518][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 48.363615][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 48.365842][ C0] x14: 1ffff00012dfb9dd x13: 0000000000000000 x12: 0000000000000000 [ 48.367971][ C0] x11: ffff700012dfb9de x10: 0000000000ff0100 x9 : 0000000000000000 [ 48.370091][ C0] x8 : ffff0000cba48000 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 48.372219][ C0] x5 : 0000000000000001 x4 : ffff800080007bc0 x3 : ffff8000802595f4 [ 48.374366][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 48.376492][ C0] Call trace: [ 48.377394][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 48.378957][ C0] apply_to_page_range+0x4c/0x64 [ 48.380362][ C0] __change_memory_common+0xac/0x3f8 [ 48.381793][ C0] set_memory_valid+0x68/0x7c [ 48.382996][ C0] kfence_guarded_free+0x278/0x5a8 [ 48.384385][ C0] rcu_guarded_free+0x4c/0x5c [ 48.385671][ C0] rcu_core+0x848/0x17a4 [ 48.386895][ C0] rcu_core_si+0x10/0x1c [ 48.388015][ C0] handle_softirqs+0x328/0xc88 [ 48.389291][ C0] __do_softirq+0x14/0x20 [ 48.390485][ C0] ____do_softirq+0x14/0x20 [ 48.391691][ C0] call_on_irq_stack+0x24/0x30 [ 48.393009][ C0] do_softirq_own_stack+0x20/0x2c [ 48.394376][ C0] __irq_exit_rcu+0x1b0/0x478 [ 48.395694][ C0] irq_exit_rcu+0x14/0x84 [ 48.396840][ C0] el1_interrupt+0x38/0x54 [ 48.398051][ C0] el1h_64_irq_handler+0x18/0x24 [ 48.399411][ C0] el1h_64_irq+0x6c/0x70 [ 48.400555][ C0] local_daif_restore+0x20/0x3c (P) [ 48.402016][ C0] el0_da+0x54/0x160 [ 48.403056][ C0] el0t_64_sync_handler+0x84/0x108 [ 48.404454][ C0] el0t_64_sync+0x198/0x19c [ 48.405643][ C0] irq event stamp: 112007 [ 48.406863][ C0] hardirqs last enabled at (112006): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 48.409789][ C0] hardirqs last disabled at (112007): [] el1_dbg+0x24/0x80 [ 48.412076][ C0] softirqs last enabled at (108904): [] local_bh_enable+0x10/0x34 [ 48.414598][ C0] softirqs last disabled at (111975): [] __do_softirq+0x14/0x20 [ 48.417176][ C0] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:00:48 parsed 1 programs [ 48.846125][ C0] ------------[ cut here ]------------ [ 48.846144][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 48.850685][ C0] Modules linked in: [ 48.851704][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 48.855111][ C0] Tainted: [W]=WARN [ 48.856087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.858709][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 48.860769][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 48.862258][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 48.863739][ C0] sp : ffff8000800079c0 [ 48.864842][ C0] x29: ffff800080007ae0 x28: ffff0001ffaa0fff x27: ffff0001fec50fe8 [ 48.866936][ C0] x26: ffff0001ffaa1000 x25: dfff800000000000 x24: ffff0001ffaa0000 [ 48.869048][ C0] x23: ffff0001fea8e500 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 48.871119][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 48.873238][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 48.875322][ C0] x14: 1ffff00012dfb967 x13: 0000000000000000 x12: 0000000000000000 [ 48.877504][ C0] x11: ffff700012dfb968 x10: 0000000000ff0100 x9 : 0000000000000000 [ 48.879635][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 48.881716][ C0] x5 : 0000000000000001 x4 : ffff800080007bc0 x3 : ffff8000802595f4 [ 48.883843][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 48.885970][ C0] Call trace: [ 48.886842][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 48.888357][ C0] apply_to_page_range+0x4c/0x64 [ 48.889712][ C0] __change_memory_common+0xac/0x3f8 [ 48.891113][ C0] set_memory_valid+0x68/0x7c [ 48.892410][ C0] kfence_guarded_free+0x278/0x5a8 [ 48.893804][ C0] rcu_guarded_free+0x4c/0x5c [ 48.895106][ C0] rcu_core+0x848/0x17a4 [ 48.896319][ C0] rcu_core_si+0x10/0x1c [ 48.897491][ C0] handle_softirqs+0x328/0xc88 [ 48.898774][ C0] __do_softirq+0x14/0x20 [ 48.899921][ C0] ____do_softirq+0x14/0x20 [ 48.901160][ C0] call_on_irq_stack+0x24/0x30 [ 48.902461][ C0] do_softirq_own_stack+0x20/0x2c [ 48.903820][ C0] __irq_exit_rcu+0x1b0/0x478 [ 48.905170][ C0] irq_exit_rcu+0x14/0x84 [ 48.906340][ C0] el1_interrupt+0x38/0x54 [ 48.907530][ C0] el1h_64_irq_handler+0x18/0x24 [ 48.908852][ C0] el1h_64_irq+0x6c/0x70 [ 48.909989][ C0] string+0x1c4/0x290 (P) [ 48.911239][ C0] vsnprintf+0x814/0xd60 [ 48.912380][ C0] seq_printf+0x148/0x22c [ 48.913565][ C0] s_show+0x194/0x294 [ 48.914613][ C0] seq_read_iter+0x85c/0xc2c [ 48.915956][ C0] seq_read+0x238/0x33c [ 48.917032][ C0] proc_reg_read+0x17c/0x2d4 [ 48.918303][ C0] vfs_read+0x22c/0x898 [ 48.919439][ C0] ksys_read+0x120/0x210 [ 48.920616][ C0] __arm64_sys_read+0x7c/0x90 [ 48.921910][ C0] invoke_syscall+0x98/0x2b8 [ 48.923105][ C0] el0_svc_common+0x130/0x23c [ 48.924387][ C0] do_el0_svc+0x48/0x58 [ 48.925509][ C0] el0_svc+0x58/0x17c [ 48.926606][ C0] el0t_64_sync_handler+0x78/0x108 [ 48.928032][ C0] el0t_64_sync+0x198/0x19c [ 48.929285][ C0] irq event stamp: 15783 [ 48.930461][ C0] hardirqs last enabled at (15782): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 48.933278][ C0] hardirqs last disabled at (15783): [] el1_dbg+0x24/0x80 [ 48.935665][ C0] softirqs last enabled at (15236): [] handle_softirqs+0xaf8/0xc88 [ 48.938344][ C0] softirqs last disabled at (15761): [] __do_softirq+0x14/0x20 [ 48.940928][ C0] ---[ end trace 0000000000000000 ]--- [ 49.556156][ C1] ------------[ cut here ]------------ [ 49.556190][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 49.560410][ C1] Modules linked in: [ 49.561436][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 49.564869][ C1] Tainted: [W]=WARN [ 49.565834][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.568405][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.570344][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 49.571802][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 49.573256][ C1] sp : ffff8000800178a0 [ 49.574306][ C1] x29: ffff8000800179c0 x28: ffff0001ffaa6fff x27: ffff0001fec50fe8 [ 49.576408][ C1] x26: ffff0001ffaa7000 x25: dfff800000000000 x24: ffff0001ffaa6000 [ 49.578445][ C1] x23: ffff0001fea8e530 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 49.580555][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 49.582584][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 49.584624][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 49.586682][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 49.588700][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 49.590806][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 49.592857][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 49.594933][ C1] Call trace: [ 49.595755][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 49.597331][ C1] apply_to_page_range+0x4c/0x64 [ 49.598695][ C1] __change_memory_common+0xac/0x3f8 [ 49.600150][ C1] set_memory_valid+0x68/0x7c [ 49.601362][ C1] kfence_guarded_free+0x278/0x5a8 [ 49.602701][ C1] __kfence_free+0x104/0x198 [ 49.603968][ C1] kmem_cache_free+0x250/0x550 [ 49.605211][ C1] ptlock_free+0x54/0x6c [ 49.606409][ C1] __tlb_remove_table+0x30/0x274 [ 49.607726][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 49.609033][ C1] rcu_core+0x848/0x17a4 [ 49.610177][ C1] rcu_core_si+0x10/0x1c [ 49.611296][ C1] handle_softirqs+0x328/0xc88 [ 49.612566][ C1] __do_softirq+0x14/0x20 [ 49.613717][ C1] ____do_softirq+0x14/0x20 [ 49.614892][ C1] call_on_irq_stack+0x24/0x30 [ 49.616142][ C1] do_softirq_own_stack+0x20/0x2c [ 49.617529][ C1] __irq_exit_rcu+0x1b0/0x478 [ 49.618738][ C1] irq_exit_rcu+0x14/0x84 [ 49.619874][ C1] el1_interrupt+0x38/0x54 [ 49.621101][ C1] el1h_64_irq_handler+0x18/0x24 [ 49.622477][ C1] el1h_64_irq+0x6c/0x70 [ 49.623576][ C1] __sanitizer_cov_trace_pc+0x4c/0x84 (P) [ 49.625132][ C1] vsnprintf+0xcc/0xd60 [ 49.626227][ C1] seq_printf+0x148/0x22c [ 49.627369][ C1] s_show+0x194/0x294 [ 49.628456][ C1] seq_read_iter+0x85c/0xc2c [ 49.629699][ C1] seq_read+0x238/0x33c [ 49.630822][ C1] proc_reg_read+0x17c/0x2d4 [ 49.632081][ C1] vfs_read+0x22c/0x898 [ 49.633175][ C1] ksys_read+0x120/0x210 [ 49.634322][ C1] __arm64_sys_read+0x7c/0x90 [ 49.635609][ C1] invoke_syscall+0x98/0x2b8 [ 49.636874][ C1] el0_svc_common+0x130/0x23c [ 49.638098][ C1] do_el0_svc+0x48/0x58 [ 49.639188][ C1] el0_svc+0x58/0x17c [ 49.640273][ C1] el0t_64_sync_handler+0x78/0x108 [ 49.641713][ C1] el0t_64_sync+0x198/0x19c [ 49.642986][ C1] irq event stamp: 87985 [ 49.644148][ C1] hardirqs last enabled at (87984): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 49.646575][ C1] hardirqs last disabled at (87985): [] el1_dbg+0x24/0x80 [ 49.648486][ C1] softirqs last enabled at (87490): [] handle_softirqs+0xaf8/0xc88 [ 49.650640][ C1] softirqs last disabled at (87931): [] __do_softirq+0x14/0x20 [ 49.652719][ C1] ---[ end trace 0000000000000000 ]--- [ 50.026110][ C0] ------------[ cut here ]------------ [ 50.026144][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 50.030698][ C0] Modules linked in: [ 50.031861][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.035428][ C0] Tainted: [W]=WARN [ 50.036445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.039279][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.041441][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 50.042970][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 50.044439][ C0] sp : ffff8000800073e0 [ 50.045538][ C0] x29: ffff800080007500 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 [ 50.047735][ C0] x26: ffff0001ffaaf000 x25: dfff800000000000 x24: ffff0001ffaae000 [ 50.050161][ C0] x23: ffff0001fea8e570 x22: 0000000000000300 x21: ffff0000d9ffbd00 [ 50.052527][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 50.054989][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: ffff700010000ec4 [ 50.057348][ C0] x14: 1ffff00010000ec4 x13: 0000000000000004 x12: ffffffffffffffff [ 50.059517][ C0] x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.061599][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 50.063700][ C0] x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff8000802595f4 [ 50.065827][ C0] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 50.067974][ C0] Call trace: [ 50.068836][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 50.070449][ C0] apply_to_page_range+0x4c/0x64 [ 50.071805][ C0] __change_memory_common+0xac/0x3f8 [ 50.073202][ C0] set_memory_valid+0x68/0x7c [ 50.074406][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 50.075824][ C0] __kfence_alloc+0x394/0x45c [ 50.077055][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 50.078654][ C0] __alloc_skb+0x144/0x2ec [ 50.079852][ C0] lapb_send_control+0x48/0x320 [ 50.081161][ C0] lapb_t1timer_expiry+0x490/0x864 [ 50.082510][ C0] call_timer_fn+0x1b4/0x818 [ 50.083749][ C0] __run_timer_base+0x51c/0x76c [ 50.085099][ C0] run_timer_softirq+0xcc/0x194 [ 50.086412][ C0] handle_softirqs+0x328/0xc88 [ 50.087665][ C0] __do_softirq+0x14/0x20 [ 50.088879][ C0] ____do_softirq+0x14/0x20 [ 50.090075][ C0] call_on_irq_stack+0x24/0x30 [ 50.091323][ C0] do_softirq_own_stack+0x20/0x2c [ 50.092775][ C0] __irq_exit_rcu+0x1b0/0x478 [ 50.094031][ C0] irq_exit_rcu+0x14/0x84 [ 50.095216][ C0] el1_interrupt+0x38/0x54 [ 50.096469][ C0] el1h_64_irq_handler+0x18/0x24 [ 50.097867][ C0] el1h_64_irq+0x6c/0x70 [ 50.099048][ C0] format_decode+0x0/0xacc (P) [ 50.100365][ C0] seq_printf+0x148/0x22c [ 50.101526][ C0] s_show+0x194/0x294 [ 50.102638][ C0] seq_read_iter+0x85c/0xc2c [ 50.103884][ C0] seq_read+0x238/0x33c [ 50.105031][ C0] proc_reg_read+0x17c/0x2d4 [ 50.106277][ C0] vfs_read+0x22c/0x898 [ 50.107445][ C0] ksys_read+0x120/0x210 [ 50.108640][ C0] __arm64_sys_read+0x7c/0x90 [ 50.109943][ C0] invoke_syscall+0x98/0x2b8 [ 50.111210][ C0] el0_svc_common+0x130/0x23c [ 50.112454][ C0] do_el0_svc+0x48/0x58 [ 50.113525][ C0] el0_svc+0x58/0x17c [ 50.114593][ C0] el0t_64_sync_handler+0x78/0x108 [ 50.115967][ C0] el0t_64_sync+0x198/0x19c [ 50.117270][ C0] irq event stamp: 105547 [ 50.118412][ C0] hardirqs last enabled at (105546): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.121348][ C0] hardirqs last disabled at (105547): [] kfence_guarded_alloc+0x190/0xb08 [ 50.124056][ C0] softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 [ 50.126688][ C0] softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 [ 50.129180][ C0] ---[ end trace 0000000000000000 ]--- [ 50.130661][ C0] ------------[ cut here ]------------ [ 50.130682][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 50.135071][ C0] Modules linked in: [ 50.136114][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.139603][ C0] Tainted: [W]=WARN [ 50.140642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.143373][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.145522][ C0] pc : change_page_range+0x188/0x1cc [ 50.146936][ C0] lr : change_page_range+0x188/0x1cc [ 50.148369][ C0] sp : ffff8000800073a0 [ 50.149449][ C0] x29: ffff8000800073a0 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 [ 50.151577][ C0] x26: ffff0001ffaaf000 x25: ffff0001ffaae000 x24: ffff0001ffaae000 [ 50.153737][ C0] x23: 006800023faae707 x22: 0040000000000001 x21: dfff800000000000 [ 50.155887][ C0] x20: 0000000000000300 x19: ffff0000d9ffbd00 x18: 0000000000000000 [ 50.158082][ C0] x17: ffff80010d0e8000 x16: ffff80008adb82bc x15: 0000000000000001 [ 50.160252][ C0] x14: 1fffe0001b3ff7a0 x13: 0000000000000000 x12: 0000000000000000 [ 50.162414][ C0] x11: ffff60001b3ff7a1 x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.164600][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 50.166832][ C0] x5 : 0000000000000001 x4 : ffff8000800075e0 x3 : ffff800080ac62d0 [ 50.169030][ C0] x2 : ffff8000800075e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 50.171292][ C0] Call trace: [ 50.172179][ C0] change_page_range+0x188/0x1cc (P) [ 50.173611][ C0] __apply_to_page_range+0xd58/0x13e4 [ 50.175160][ C0] apply_to_page_range+0x4c/0x64 [ 50.176536][ C0] __change_memory_common+0xac/0x3f8 [ 50.177998][ C0] set_memory_valid+0x68/0x7c [ 50.179317][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 50.180683][ C0] __kfence_alloc+0x394/0x45c [ 50.181992][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 50.183641][ C0] __alloc_skb+0x144/0x2ec [ 50.184916][ C0] lapb_send_control+0x48/0x320 [ 50.186280][ C0] lapb_t1timer_expiry+0x490/0x864 [ 50.187688][ C0] call_timer_fn+0x1b4/0x818 [ 50.188967][ C0] __run_timer_base+0x51c/0x76c [ 50.190285][ C0] run_timer_softirq+0xcc/0x194 [ 50.191584][ C0] handle_softirqs+0x328/0xc88 [ 50.192894][ C0] __do_softirq+0x14/0x20 [ 50.194042][ C0] ____do_softirq+0x14/0x20 [ 50.195276][ C0] call_on_irq_stack+0x24/0x30 [ 50.196519][ C0] do_softirq_own_stack+0x20/0x2c [ 50.197907][ C0] __irq_exit_rcu+0x1b0/0x478 [ 50.199185][ C0] irq_exit_rcu+0x14/0x84 [ 50.200358][ C0] el1_interrupt+0x38/0x54 [ 50.201549][ C0] el1h_64_irq_handler+0x18/0x24 [ 50.202902][ C0] el1h_64_irq+0x6c/0x70 [ 50.204055][ C0] format_decode+0x0/0xacc (P) [ 50.205349][ C0] seq_printf+0x148/0x22c [ 50.206517][ C0] s_show+0x194/0x294 [ 50.207615][ C0] seq_read_iter+0x85c/0xc2c [ 50.208958][ C0] seq_read+0x238/0x33c [ 50.210044][ C0] proc_reg_read+0x17c/0x2d4 [ 50.211270][ C0] vfs_read+0x22c/0x898 [ 50.212399][ C0] ksys_read+0x120/0x210 [ 50.213554][ C0] __arm64_sys_read+0x7c/0x90 [ 50.214810][ C0] invoke_syscall+0x98/0x2b8 [ 50.216045][ C0] el0_svc_common+0x130/0x23c [ 50.217286][ C0] do_el0_svc+0x48/0x58 [ 50.218411][ C0] el0_svc+0x58/0x17c [ 50.219468][ C0] el0t_64_sync_handler+0x78/0x108 [ 50.220903][ C0] el0t_64_sync+0x198/0x19c [ 50.222187][ C0] irq event stamp: 105547 [ 50.223353][ C0] hardirqs last enabled at (105546): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.226227][ C0] hardirqs last disabled at (105547): [] kfence_guarded_alloc+0x190/0xb08 [ 50.228967][ C0] softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 [ 50.231442][ C0] softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 [ 50.233900][ C0] ---[ end trace 0000000000000000 ]--- [ 50.235576][ C0] ------------[ cut here ]------------ [ 50.235601][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 50.240030][ C0] Modules linked in: [ 50.241069][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.244552][ C0] Tainted: [W]=WARN [ 50.245565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.248218][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.250287][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 50.251811][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 50.253316][ C0] sp : ffff800080007160 [ 50.254390][ C0] x29: ffff800080007280 x28: ffff0001ffaaefff x27: ffff0001fec50fe8 [ 50.256578][ C0] x26: ffff0001ffaaf000 x25: dfff800000000000 x24: ffff0001ffaae000 [ 50.258770][ C0] x23: ffff0001fea8e570 x22: 0000000000000500 x21: ffff0000d9ffbd00 [ 50.260918][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 50.263157][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 50.265326][ C0] x14: 1ffff00012dfb9bb x13: 0000000000000000 x12: 0000000000000000 [ 50.267432][ C0] x11: ffff700012dfb9bc x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.269684][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 50.271951][ C0] x5 : 0000000000000001 x4 : ffff800080007360 x3 : ffff8000802595f4 [ 50.274078][ C0] x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 [ 50.276229][ C0] Call trace: [ 50.277108][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 50.278626][ C0] apply_to_page_range+0x4c/0x64 [ 50.279901][ C0] __change_memory_common+0xac/0x3f8 [ 50.281278][ C0] set_memory_valid+0x68/0x7c [ 50.282505][ C0] kfence_guarded_free+0x278/0x5a8 [ 50.283914][ C0] __kfence_free+0x104/0x198 [ 50.285137][ C0] kmem_cache_free_bulk+0x490/0x51c [ 50.286493][ C0] kfree_skb_list_reason+0x3ac/0x418 [ 50.287935][ C0] __dev_queue_xmit+0x1ac8/0x31f0 [ 50.289288][ C0] lapbeth_data_transmit+0x1fc/0x2a8 [ 50.290724][ C0] lapb_data_transmit+0x8c/0xb0 [ 50.292051][ C0] lapb_transmit_buffer+0x160/0x208 [ 50.293503][ C0] lapb_send_control+0x21c/0x320 [ 50.294883][ C0] lapb_t1timer_expiry+0x490/0x864 [ 50.296225][ C0] call_timer_fn+0x1b4/0x818 [ 50.297435][ C0] __run_timer_base+0x51c/0x76c [ 50.298796][ C0] run_timer_softirq+0xcc/0x194 [ 50.300122][ C0] handle_softirqs+0x328/0xc88 [ 50.301510][ C0] __do_softirq+0x14/0x20 [ 50.302684][ C0] ____do_softirq+0x14/0x20 [ 50.303927][ C0] call_on_irq_stack+0x24/0x30 [ 50.305243][ C0] do_softirq_own_stack+0x20/0x2c [ 50.306640][ C0] __irq_exit_rcu+0x1b0/0x478 [ 50.307879][ C0] irq_exit_rcu+0x14/0x84 [ 50.309062][ C0] el1_interrupt+0x38/0x54 [ 50.310238][ C0] el1h_64_irq_handler+0x18/0x24 [ 50.311574][ C0] el1h_64_irq+0x6c/0x70 [ 50.312683][ C0] format_decode+0x0/0xacc (P) [ 50.314001][ C0] seq_printf+0x148/0x22c [ 50.315225][ C0] s_show+0x194/0x294 [ 50.316279][ C0] seq_read_iter+0x85c/0xc2c [ 50.317516][ C0] seq_read+0x238/0x33c [ 50.318602][ C0] proc_reg_read+0x17c/0x2d4 [ 50.319878][ C0] vfs_read+0x22c/0x898 [ 50.321028][ C0] ksys_read+0x120/0x210 [ 50.322087][ C0] __arm64_sys_read+0x7c/0x90 [ 50.323447][ C0] invoke_syscall+0x98/0x2b8 [ 50.324654][ C0] el0_svc_common+0x130/0x23c [ 50.325946][ C0] do_el0_svc+0x48/0x58 [ 50.327057][ C0] el0_svc+0x58/0x17c [ 50.328134][ C0] el0t_64_sync_handler+0x78/0x108 [ 50.329520][ C0] el0t_64_sync+0x198/0x19c [ 50.330779][ C0] irq event stamp: 105565 [ 50.332025][ C0] hardirqs last enabled at (105564): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.334874][ C0] hardirqs last disabled at (105565): [] el1_dbg+0x24/0x80 [ 50.337268][ C0] softirqs last enabled at (105222): [] local_bh_enable+0x10/0x34 [ 50.339855][ C0] softirqs last disabled at (105537): [] __do_softirq+0x14/0x20 [ 50.342340][ C0] ---[ end trace 0000000000000000 ]--- [ 50.506130][ C1] ------------[ cut here ]------------ [ 50.506164][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 50.510419][ C1] Modules linked in: [ 50.511412][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.514832][ C1] Tainted: [W]=WARN [ 50.515791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.518379][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.520419][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 50.521911][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 50.523379][ C1] sp : ffff8000800171e0 [ 50.524488][ C1] x29: ffff800080017300 x28: ffff0001ffab2fff x27: ffff0001fec50fe8 [ 50.526554][ C1] x26: ffff0001ffab3000 x25: dfff800000000000 x24: ffff0001ffab2000 [ 50.528596][ C1] x23: ffff0001fea8e590 x22: 0000000000000300 x21: ffff0000d9ffbd00 [ 50.530654][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 50.532737][ C1] x17: ffff80010d10c000 x16: ffff80008adb82bc x15: ffff700010002e84 [ 50.534818][ C1] x14: 1ffff00010002e84 x13: 0000000000000004 x12: ffffffffffffffff [ 50.536948][ C1] x11: 000000002d8dec0a x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.539030][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 50.541269][ C1] x5 : 0000000000000001 x4 : ffff8000800173e0 x3 : ffff8000802595f4 [ 50.543384][ C1] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 50.545499][ C1] Call trace: [ 50.546348][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 50.547935][ C1] apply_to_page_range+0x4c/0x64 [ 50.549269][ C1] __change_memory_common+0xac/0x3f8 [ 50.550721][ C1] set_memory_valid+0x68/0x7c [ 50.552031][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 50.553450][ C1] __kfence_alloc+0x394/0x45c [ 50.554700][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 50.556234][ C1] __alloc_skb+0x144/0x2ec [ 50.557463][ C1] lapb_send_control+0x48/0x320 [ 50.558834][ C1] lapb_t1timer_expiry+0x490/0x864 [ 50.560194][ C1] call_timer_fn+0x1b4/0x818 [ 50.561510][ C1] __run_timer_base+0x51c/0x76c [ 50.562844][ C1] timer_expire_remote+0x78/0xa0 [ 50.564202][ C1] tmigr_handle_remote+0x8d4/0x1340 [ 50.565516][ C1] run_timer_softirq+0x190/0x194 [ 50.566809][ C1] handle_softirqs+0x328/0xc88 [ 50.568080][ C1] __do_softirq+0x14/0x20 [ 50.569222][ C1] ____do_softirq+0x14/0x20 [ 50.570400][ C1] call_on_irq_stack+0x24/0x30 [ 50.571626][ C1] do_softirq_own_stack+0x20/0x2c [ 50.572951][ C1] __irq_exit_rcu+0x1b0/0x478 [ 50.574257][ C1] irq_exit_rcu+0x14/0x84 [ 50.575393][ C1] el1_interrupt+0x38/0x54 [ 50.576637][ C1] el1h_64_irq_handler+0x18/0x24 [ 50.577979][ C1] el1h_64_irq+0x6c/0x70 [ 50.579182][ C1] __sanitizer_cov_trace_switch+0xdc/0xe4 (P) [ 50.580833][ C1] vsnprintf+0x5bc/0xd60 [ 50.581982][ C1] seq_printf+0x148/0x22c [ 50.583127][ C1] s_show+0x194/0x294 [ 50.584231][ C1] seq_read_iter+0x85c/0xc2c [ 50.585470][ C1] seq_read+0x238/0x33c [ 50.586597][ C1] proc_reg_read+0x17c/0x2d4 [ 50.587929][ C1] vfs_read+0x22c/0x898 [ 50.589073][ C1] ksys_read+0x120/0x210 [ 50.590176][ C1] __arm64_sys_read+0x7c/0x90 [ 50.591443][ C1] invoke_syscall+0x98/0x2b8 [ 50.592668][ C1] el0_svc_common+0x130/0x23c [ 50.593935][ C1] do_el0_svc+0x48/0x58 [ 50.595011][ C1] el0_svc+0x58/0x17c [ 50.596057][ C1] el0t_64_sync_handler+0x78/0x108 [ 50.597458][ C1] el0t_64_sync+0x198/0x19c [ 50.598670][ C1] irq event stamp: 113295 [ 50.599831][ C1] hardirqs last enabled at (113294): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.602642][ C1] hardirqs last disabled at (113295): [] kfence_guarded_alloc+0x190/0xb08 [ 50.605395][ C1] softirqs last enabled at (112818): [] handle_softirqs+0xaf8/0xc88 [ 50.607927][ C1] softirqs last disabled at (113273): [] __do_softirq+0x14/0x20 [ 50.610484][ C1] ---[ end trace 0000000000000000 ]--- [ 50.612031][ C1] ------------[ cut here ]------------ [ 50.612045][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 50.616263][ C1] Modules linked in: [ 50.617305][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.620825][ C1] Tainted: [W]=WARN [ 50.621788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.624530][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.626745][ C1] pc : change_page_range+0x188/0x1cc [ 50.628191][ C1] lr : change_page_range+0x188/0x1cc [ 50.629652][ C1] sp : ffff8000800171a0 [ 50.630759][ C1] x29: ffff8000800171a0 x28: ffff0001ffab2fff x27: ffff0001fec50fe8 [ 50.632860][ C1] x26: ffff0001ffab3000 x25: ffff0001ffab2000 x24: ffff0001ffab2000 [ 50.634964][ C1] x23: 006800023fab2707 x22: 0040000000000001 x21: dfff800000000000 [ 50.637179][ C1] x20: 0000000000000300 x19: ffff0000d9ffbd00 x18: 0000000000000000 [ 50.639487][ C1] x17: ffff80010d10c000 x16: ffff80008adb82bc x15: 0000000000000001 [ 50.641627][ C1] x14: 1fffe0001b3ff7a0 x13: 0000000000000000 x12: 0000000000000000 [ 50.643776][ C1] x11: ffff60001b3ff7a1 x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.645991][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 50.648245][ C1] x5 : 0000000000000001 x4 : ffff8000800173e0 x3 : ffff800080ac62d0 [ 50.650489][ C1] x2 : ffff8000800173e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 50.652627][ C1] Call trace: [ 50.653480][ C1] change_page_range+0x188/0x1cc (P) [ 50.654925][ C1] __apply_to_page_range+0xd58/0x13e4 [ 50.656365][ C1] apply_to_page_range+0x4c/0x64 [ 50.657763][ C1] __change_memory_common+0xac/0x3f8 [ 50.659171][ C1] set_memory_valid+0x68/0x7c [ 50.660430][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 50.661839][ C1] __kfence_alloc+0x394/0x45c [ 50.663087][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 50.664635][ C1] __alloc_skb+0x144/0x2ec [ 50.665842][ C1] lapb_send_control+0x48/0x320 [ 50.667190][ C1] lapb_t1timer_expiry+0x490/0x864 [ 50.668535][ C1] call_timer_fn+0x1b4/0x818 [ 50.669816][ C1] __run_timer_base+0x51c/0x76c [ 50.671183][ C1] timer_expire_remote+0x78/0xa0 [ 50.672554][ C1] tmigr_handle_remote+0x8d4/0x1340 [ 50.673909][ C1] run_timer_softirq+0x190/0x194 [ 50.675270][ C1] handle_softirqs+0x328/0xc88 [ 50.676535][ C1] __do_softirq+0x14/0x20 [ 50.677731][ C1] ____do_softirq+0x14/0x20 [ 50.678981][ C1] call_on_irq_stack+0x24/0x30 [ 50.680247][ C1] do_softirq_own_stack+0x20/0x2c [ 50.681609][ C1] __irq_exit_rcu+0x1b0/0x478 [ 50.682852][ C1] irq_exit_rcu+0x14/0x84 [ 50.684038][ C1] el1_interrupt+0x38/0x54 [ 50.685192][ C1] el1h_64_irq_handler+0x18/0x24 [ 50.686515][ C1] el1h_64_irq+0x6c/0x70 [ 50.687712][ C1] __sanitizer_cov_trace_switch+0xdc/0xe4 (P) [ 50.689337][ C1] vsnprintf+0x5bc/0xd60 [ 50.690522][ C1] seq_printf+0x148/0x22c [ 50.691659][ C1] s_show+0x194/0x294 [ 50.692727][ C1] seq_read_iter+0x85c/0xc2c [ 50.693983][ C1] seq_read+0x238/0x33c [ 50.695157][ C1] proc_reg_read+0x17c/0x2d4 [ 50.696367][ C1] vfs_read+0x22c/0x898 [ 50.697559][ C1] ksys_read+0x120/0x210 [ 50.698670][ C1] __arm64_sys_read+0x7c/0x90 [ 50.699927][ C1] invoke_syscall+0x98/0x2b8 [ 50.701280][ C1] el0_svc_common+0x130/0x23c [ 50.702511][ C1] do_el0_svc+0x48/0x58 [ 50.703622][ C1] el0_svc+0x58/0x17c [ 50.704690][ C1] el0t_64_sync_handler+0x78/0x108 [ 50.706073][ C1] el0t_64_sync+0x198/0x19c [ 50.707275][ C1] irq event stamp: 113295 [ 50.708471][ C1] hardirqs last enabled at (113294): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.711233][ C1] hardirqs last disabled at (113295): [] kfence_guarded_alloc+0x190/0xb08 [ 50.713891][ C1] softirqs last enabled at (112818): [] handle_softirqs+0xaf8/0xc88 [ 50.716453][ C1] softirqs last disabled at (113273): [] __do_softirq+0x14/0x20 [ 50.718873][ C1] ---[ end trace 0000000000000000 ]--- [ 50.720514][ C1] ------------[ cut here ]------------ [ 50.720540][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 50.724916][ C1] Modules linked in: [ 50.725921][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 50.729336][ C1] Tainted: [W]=WARN [ 50.730271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.732995][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.735017][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 50.736468][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 50.737938][ C1] sp : ffff800080016f60 [ 50.739045][ C1] x29: ffff800080017080 x28: ffff0001ffab2fff x27: ffff0001fec50fe8 [ 50.741259][ C1] x26: ffff0001ffab3000 x25: dfff800000000000 x24: ffff0001ffab2000 [ 50.743455][ C1] x23: ffff0001fea8e590 x22: 0000000000000500 x21: ffff0000d9ffbd00 [ 50.745625][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 50.747762][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 50.749907][ C1] x14: 1ffff00012dfb963 x13: 0000000000000000 x12: 0000000000000000 [ 50.752045][ C1] x11: ffff700012dfb964 x10: 0000000000ff0100 x9 : 0000000000000000 [ 50.754165][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 50.756317][ C1] x5 : 0000000000000001 x4 : ffff800080017160 x3 : ffff8000802595f4 [ 50.758391][ C1] x2 : 0000000000001000 x1 : 0000000000000500 x0 : 0000000000000000 [ 50.760598][ C1] Call trace: [ 50.761473][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 50.763082][ C1] apply_to_page_range+0x4c/0x64 [ 50.764393][ C1] __change_memory_common+0xac/0x3f8 [ 50.765861][ C1] set_memory_valid+0x68/0x7c [ 50.767083][ C1] kfence_guarded_free+0x278/0x5a8 [ 50.768431][ C1] __kfence_free+0x104/0x198 [ 50.769680][ C1] kmem_cache_free_bulk+0x490/0x51c [ 50.771182][ C1] kfree_skb_list_reason+0x3ac/0x418 [ 50.772595][ C1] __dev_queue_xmit+0x1ac8/0x31f0 [ 50.774007][ C1] lapbeth_data_transmit+0x1fc/0x2a8 [ 50.775557][ C1] lapb_data_transmit+0x8c/0xb0 [ 50.776867][ C1] lapb_transmit_buffer+0x160/0x208 [ 50.778258][ C1] lapb_send_control+0x21c/0x320 [ 50.779534][ C1] lapb_t1timer_expiry+0x490/0x864 [ 50.780867][ C1] call_timer_fn+0x1b4/0x818 [ 50.782038][ C1] __run_timer_base+0x51c/0x76c [ 50.783470][ C1] timer_expire_remote+0x78/0xa0 [ 50.784773][ C1] tmigr_handle_remote+0x8d4/0x1340 [ 50.786249][ C1] run_timer_softirq+0x190/0x194 [ 50.787558][ C1] handle_softirqs+0x328/0xc88 [ 50.788813][ C1] __do_softirq+0x14/0x20 [ 50.789955][ C1] ____do_softirq+0x14/0x20 [ 50.791101][ C1] call_on_irq_stack+0x24/0x30 [ 50.792406][ C1] do_softirq_own_stack+0x20/0x2c [ 50.793823][ C1] __irq_exit_rcu+0x1b0/0x478 [ 50.795097][ C1] irq_exit_rcu+0x14/0x84 [ 50.796284][ C1] el1_interrupt+0x38/0x54 [ 50.797468][ C1] el1h_64_irq_handler+0x18/0x24 [ 50.798916][ C1] el1h_64_irq+0x6c/0x70 [ 50.800039][ C1] __sanitizer_cov_trace_switch+0xdc/0xe4 (P) [ 50.801728][ C1] vsnprintf+0x5bc/0xd60 [ 50.802895][ C1] seq_printf+0x148/0x22c [ 50.804071][ C1] s_show+0x194/0x294 [ 50.805131][ C1] seq_read_iter+0x85c/0xc2c [ 50.806355][ C1] seq_read+0x238/0x33c [ 50.807527][ C1] proc_reg_read+0x17c/0x2d4 [ 50.808696][ C1] vfs_read+0x22c/0x898 [ 50.809804][ C1] ksys_read+0x120/0x210 [ 50.810905][ C1] __arm64_sys_read+0x7c/0x90 [ 50.812120][ C1] invoke_syscall+0x98/0x2b8 [ 50.813362][ C1] el0_svc_common+0x130/0x23c [ 50.814625][ C1] do_el0_svc+0x48/0x58 [ 50.815694][ C1] el0_svc+0x58/0x17c [ 50.816803][ C1] el0t_64_sync_handler+0x78/0x108 [ 50.818187][ C1] el0t_64_sync+0x198/0x19c [ 50.819438][ C1] irq event stamp: 113311 [ 50.820611][ C1] hardirqs last enabled at (113310): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 50.823411][ C1] hardirqs last disabled at (113311): [] el1_dbg+0x24/0x80 [ 50.825901][ C1] softirqs last enabled at (112818): [] handle_softirqs+0xaf8/0xc88 [ 50.828458][ C1] softirqs last disabled at (113273): [] __do_softirq+0x14/0x20 [ 50.830907][ C1] ---[ end trace 0000000000000000 ]--- [ 51.026176][ C0] ------------[ cut here ]------------ [ 51.026212][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 51.030650][ C0] Modules linked in: [ 51.031671][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 51.035050][ C0] Tainted: [W]=WARN [ 51.036036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.038637][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.040662][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 51.042166][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 51.043639][ C0] sp : ffff8000800078a0 [ 51.044719][ C0] x29: ffff8000800079c0 x28: ffff0001ffaacfff x27: ffff0001fec50fe8 [ 51.046807][ C0] x26: ffff0001ffaad000 x25: dfff800000000000 x24: ffff0001ffaac000 [ 51.048865][ C0] x23: ffff0001fea8e560 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 51.050927][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 51.053048][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 51.055105][ C0] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 51.057195][ C0] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 51.059364][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 51.061430][ C0] x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 [ 51.063537][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 51.065643][ C0] Call trace: [ 51.066508][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 51.068013][ C0] apply_to_page_range+0x4c/0x64 [ 51.069386][ C0] __change_memory_common+0xac/0x3f8 [ 51.070869][ C0] set_memory_valid+0x68/0x7c [ 51.072176][ C0] kfence_guarded_free+0x278/0x5a8 [ 51.073527][ C0] __kfence_free+0x104/0x198 [ 51.074783][ C0] kmem_cache_free+0x250/0x550 [ 51.076086][ C0] ptlock_free+0x54/0x6c [ 51.077183][ C0] __tlb_remove_table+0x30/0x274 [ 51.078461][ C0] tlb_remove_table_rcu+0x8c/0x19c [ 51.079869][ C0] rcu_core+0x848/0x17a4 [ 51.081000][ C0] rcu_core_si+0x10/0x1c [ 51.082149][ C0] handle_softirqs+0x328/0xc88 [ 51.083407][ C0] __do_softirq+0x14/0x20 [ 51.084548][ C0] ____do_softirq+0x14/0x20 [ 51.085764][ C0] call_on_irq_stack+0x24/0x30 [ 51.087124][ C0] do_softirq_own_stack+0x20/0x2c [ 51.088428][ C0] __irq_exit_rcu+0x1b0/0x478 [ 51.089732][ C0] irq_exit_rcu+0x14/0x84 [ 51.090932][ C0] el1_interrupt+0x38/0x54 [ 51.092155][ C0] el1h_64_irq_handler+0x18/0x24 [ 51.093573][ C0] el1h_64_irq+0x6c/0x70 [ 51.094682][ C0] __sanitizer_cov_trace_pc+0x14/0x84 (P) [ 51.096214][ C0] vsnprintf+0xcc/0xd60 [ 51.097365][ C0] seq_printf+0x148/0x22c [ 51.098544][ C0] s_show+0x194/0x294 [ 51.099585][ C0] seq_read_iter+0x85c/0xc2c [ 51.100786][ C0] seq_read+0x238/0x33c [ 51.101916][ C0] proc_reg_read+0x17c/0x2d4 [ 51.103105][ C0] vfs_read+0x22c/0x898 [ 51.104212][ C0] ksys_read+0x120/0x210 [ 51.105329][ C0] __arm64_sys_read+0x7c/0x90 [ 51.106544][ C0] invoke_syscall+0x98/0x2b8 [ 51.107776][ C0] el0_svc_common+0x130/0x23c [ 51.109003][ C0] do_el0_svc+0x48/0x58 [ 51.110093][ C0] el0_svc+0x58/0x17c [ 51.111161][ C0] el0t_64_sync_handler+0x78/0x108 [ 51.112575][ C0] el0t_64_sync+0x198/0x19c [ 51.113909][ C0] irq event stamp: 167541 [ 51.115099][ C0] hardirqs last enabled at (167540): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 51.117966][ C0] hardirqs last disabled at (167541): [] el1_dbg+0x24/0x80 [ 51.120287][ C0] softirqs last enabled at (167012): [] handle_softirqs+0xaf8/0xc88 [ 51.122896][ C0] softirqs last disabled at (167469): [] __do_softirq+0x14/0x20 [ 51.125555][ C0] ---[ end trace 0000000000000000 ]--- [ 51.127348][ C0] ------------[ cut here ]------------ [ 51.127372][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 51.132074][ C0] Modules linked in: [ 51.133172][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 51.136754][ C0] Tainted: [W]=WARN [ 51.137793][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.140561][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.142739][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 51.144387][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 51.145976][ C0] sp : ffff8000800078a0 [ 51.147163][ C0] x29: ffff8000800079c0 x28: ffff0001ffaa4fff x27: ffff0001fec50fe8 [ 51.149358][ C0] x26: ffff0001ffaa5000 x25: dfff800000000000 x24: ffff0001ffaa4000 [ 51.151576][ C0] x23: ffff0001fea8e520 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 51.153805][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 51.156026][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 51.158245][ C0] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 51.160415][ C0] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 51.162685][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 51.164992][ C0] x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 [ 51.167225][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 51.169612][ C0] Call trace: [ 51.170509][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 51.172073][ C0] apply_to_page_range+0x4c/0x64 [ 51.173411][ C0] __change_memory_common+0xac/0x3f8 [ 51.174831][ C0] set_memory_valid+0x68/0x7c [ 51.176133][ C0] kfence_guarded_free+0x278/0x5a8 [ 51.177610][ C0] __kfence_free+0x104/0x198 [ 51.178890][ C0] kmem_cache_free+0x250/0x550 [ 51.180314][ C0] ptlock_free+0x54/0x6c [ 51.181441][ C0] __tlb_remove_table+0x30/0x274 [ 51.182769][ C0] tlb_remove_table_rcu+0x8c/0x19c [ 51.184111][ C0] rcu_core+0x848/0x17a4 [ 51.185245][ C0] rcu_core_si+0x10/0x1c [ 51.186509][ C0] handle_softirqs+0x328/0xc88 [ 51.187870][ C0] __do_softirq+0x14/0x20 [ 51.188981][ C0] ____do_softirq+0x14/0x20 [ 51.190273][ C0] call_on_irq_stack+0x24/0x30 [ 51.191592][ C0] do_softirq_own_stack+0x20/0x2c [ 51.192992][ C0] __irq_exit_rcu+0x1b0/0x478 [ 51.194303][ C0] irq_exit_rcu+0x14/0x84 [ 51.195484][ C0] el1_interrupt+0x38/0x54 [ 51.196667][ C0] el1h_64_irq_handler+0x18/0x24 [ 51.197989][ C0] el1h_64_irq+0x6c/0x70 [ 51.199132][ C0] __sanitizer_cov_trace_pc+0x14/0x84 (P) [ 51.200782][ C0] vsnprintf+0xcc/0xd60 [ 51.201960][ C0] seq_printf+0x148/0x22c [ 51.203192][ C0] s_show+0x194/0x294 [ 51.204230][ C0] seq_read_iter+0x85c/0xc2c [ 51.205449][ C0] seq_read+0x238/0x33c [ 51.206595][ C0] proc_reg_read+0x17c/0x2d4 [ 51.207769][ C0] vfs_read+0x22c/0x898 [ 51.208874][ C0] ksys_read+0x120/0x210 [ 51.210030][ C0] __arm64_sys_read+0x7c/0x90 [ 51.211349][ C0] invoke_syscall+0x98/0x2b8 [ 51.212699][ C0] el0_svc_common+0x130/0x23c [ 51.213957][ C0] do_el0_svc+0x48/0x58 [ 51.215115][ C0] el0_svc+0x58/0x17c [ 51.216187][ C0] el0t_64_sync_handler+0x78/0x108 [ 51.217545][ C0] el0t_64_sync+0x198/0x19c [ 51.218795][ C0] irq event stamp: 167567 [ 51.219939][ C0] hardirqs last enabled at (167566): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 51.222774][ C0] hardirqs last disabled at (167567): [] el1_dbg+0x24/0x80 [ 51.225130][ C0] softirqs last enabled at (167012): [] handle_softirqs+0xaf8/0xc88 [ 51.227685][ C0] softirqs last disabled at (167469): [] __do_softirq+0x14/0x20 [ 51.230100][ C0] ---[ end trace 0000000000000000 ]--- [ 52.556190][ C1] ------------[ cut here ]------------ [ 52.556228][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 52.560535][ C1] Modules linked in: [ 52.561560][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 52.564908][ C1] Tainted: [W]=WARN [ 52.565888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.568483][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.570519][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 52.572007][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 52.573446][ C1] sp : ffff8000800178a0 [ 52.574500][ C1] x29: ffff8000800179c0 x28: ffff0001ffabcfff x27: ffff0001fec50fe8 [ 52.576567][ C1] x26: ffff0001ffabd000 x25: dfff800000000000 x24: ffff0001ffabc000 [ 52.578611][ C1] x23: ffff0001fea8e5e0 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 52.580662][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 52.582716][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 52.584780][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 52.586798][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 52.588850][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 52.590915][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 52.592931][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 52.594965][ C1] Call trace: [ 52.595776][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 52.597193][ C1] apply_to_page_range+0x4c/0x64 [ 52.598604][ C1] __change_memory_common+0xac/0x3f8 [ 52.600039][ C1] set_memory_valid+0x68/0x7c [ 52.601352][ C1] kfence_guarded_free+0x278/0x5a8 [ 52.602704][ C1] __kfence_free+0x104/0x198 [ 52.603957][ C1] kmem_cache_free+0x250/0x550 [ 52.605232][ C1] ptlock_free+0x54/0x6c [ 52.606293][ C1] __tlb_remove_table+0x30/0x274 [ 52.607632][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 52.609008][ C1] rcu_core+0x848/0x17a4 [ 52.610110][ C1] rcu_core_si+0x10/0x1c [ 52.611254][ C1] handle_softirqs+0x328/0xc88 [ 52.612613][ C1] __do_softirq+0x14/0x20 [ 52.613774][ C1] ____do_softirq+0x14/0x20 [ 52.614963][ C1] call_on_irq_stack+0x24/0x30 [ 52.616284][ C1] do_softirq_own_stack+0x20/0x2c [ 52.617663][ C1] __irq_exit_rcu+0x1b0/0x478 [ 52.619040][ C1] irq_exit_rcu+0x14/0x84 [ 52.620193][ C1] el1_interrupt+0x38/0x54 [ 52.621364][ C1] el1h_64_irq_handler+0x18/0x24 [ 52.622702][ C1] el1h_64_irq+0x6c/0x70 [ 52.623814][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 52.625577][ C1] pointer+0x4a8/0xdcc [ 52.626620][ C1] vsnprintf+0x5bc/0xd60 [ 52.627730][ C1] seq_printf+0x148/0x22c [ 52.628896][ C1] s_show+0x194/0x294 [ 52.629978][ C1] seq_read_iter+0x85c/0xc2c [ 52.631217][ C1] seq_read+0x238/0x33c [ 52.632285][ C1] proc_reg_read+0x17c/0x2d4 [ 52.633492][ C1] vfs_read+0x22c/0x898 [ 52.634627][ C1] ksys_read+0x120/0x210 [ 52.635778][ C1] __arm64_sys_read+0x7c/0x90 [ 52.636987][ C1] invoke_syscall+0x98/0x2b8 [ 52.638272][ C1] el0_svc_common+0x130/0x23c [ 52.639531][ C1] do_el0_svc+0x48/0x58 [ 52.640638][ C1] el0_svc+0x58/0x17c [ 52.641720][ C1] el0t_64_sync_handler+0x78/0x108 [ 52.643078][ C1] el0t_64_sync+0x198/0x19c [ 52.644248][ C1] irq event stamp: 329683 [ 52.645437][ C1] hardirqs last enabled at (329682): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 52.648232][ C1] hardirqs last disabled at (329683): [] el1_dbg+0x24/0x80 [ 52.650539][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 52.653197][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 52.655667][ C1] ---[ end trace 0000000000000000 ]--- [ 52.657354][ C1] ------------[ cut here ]------------ [ 52.657375][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 52.661696][ C1] Modules linked in: [ 52.662713][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 52.666290][ C1] Tainted: [W]=WARN [ 52.667294][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.669965][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.672031][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 52.673576][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 52.675057][ C1] sp : ffff8000800178a0 [ 52.676177][ C1] x29: ffff8000800179c0 x28: ffff0001ffac0fff x27: ffff0001fec50fe8 [ 52.678332][ C1] x26: ffff0001ffac1000 x25: dfff800000000000 x24: ffff0001ffac0000 [ 52.680513][ C1] x23: ffff0001fea8e600 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 52.682679][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 52.684856][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 52.687080][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 52.689224][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 52.691437][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 52.693617][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 52.695815][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 52.697934][ C1] Call trace: [ 52.698794][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 52.700357][ C1] apply_to_page_range+0x4c/0x64 [ 52.701711][ C1] __change_memory_common+0xac/0x3f8 [ 52.703119][ C1] set_memory_valid+0x68/0x7c [ 52.704433][ C1] kfence_guarded_free+0x278/0x5a8 [ 52.705811][ C1] __kfence_free+0x104/0x198 [ 52.707142][ C1] kmem_cache_free+0x250/0x550 [ 52.708372][ C1] ptlock_free+0x54/0x6c [ 52.709543][ C1] __tlb_remove_table+0x30/0x274 [ 52.710867][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 52.712185][ C1] rcu_core+0x848/0x17a4 [ 52.713477][ C1] rcu_core_si+0x10/0x1c [ 52.714504][ C1] handle_softirqs+0x328/0xc88 [ 52.715820][ C1] __do_softirq+0x14/0x20 [ 52.717038][ C1] ____do_softirq+0x14/0x20 [ 52.718182][ C1] call_on_irq_stack+0x24/0x30 [ 52.719467][ C1] do_softirq_own_stack+0x20/0x2c [ 52.720973][ C1] __irq_exit_rcu+0x1b0/0x478 [ 52.722238][ C1] irq_exit_rcu+0x14/0x84 [ 52.723456][ C1] el1_interrupt+0x38/0x54 [ 52.724653][ C1] el1h_64_irq_handler+0x18/0x24 [ 52.725915][ C1] el1h_64_irq+0x6c/0x70 [ 52.727006][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 52.728833][ C1] pointer+0x4a8/0xdcc [ 52.729930][ C1] vsnprintf+0x5bc/0xd60 [ 52.731096][ C1] seq_printf+0x148/0x22c [ 52.732302][ C1] s_show+0x194/0x294 [ 52.733477][ C1] seq_read_iter+0x85c/0xc2c [ 52.734699][ C1] seq_read+0x238/0x33c [ 52.735769][ C1] proc_reg_read+0x17c/0x2d4 [ 52.736955][ C1] vfs_read+0x22c/0x898 [ 52.738040][ C1] ksys_read+0x120/0x210 [ 52.739228][ C1] __arm64_sys_read+0x7c/0x90 [ 52.740436][ C1] invoke_syscall+0x98/0x2b8 [ 52.741599][ C1] el0_svc_common+0x130/0x23c [ 52.742833][ C1] do_el0_svc+0x48/0x58 [ 52.743989][ C1] el0_svc+0x58/0x17c [ 52.745013][ C1] el0t_64_sync_handler+0x78/0x108 [ 52.746406][ C1] el0t_64_sync+0x198/0x19c [ 52.747599][ C1] irq event stamp: 329707 [ 52.748870][ C1] hardirqs last enabled at (329706): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 52.751727][ C1] hardirqs last disabled at (329707): [] el1_dbg+0x24/0x80 [ 52.754109][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 52.756753][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 52.759106][ C1] ---[ end trace 0000000000000000 ]--- [ 52.760683][ C1] ------------[ cut here ]------------ [ 52.760705][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 52.764974][ C1] Modules linked in: [ 52.766017][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 52.769362][ C1] Tainted: [W]=WARN [ 52.770307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.772994][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.775062][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 52.776555][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 52.778037][ C1] sp : ffff8000800178a0 [ 52.779157][ C1] x29: ffff8000800179c0 x28: ffff0001ffac2fff x27: ffff0001fec50fe8 [ 52.781242][ C1] x26: ffff0001ffac3000 x25: dfff800000000000 x24: ffff0001ffac2000 [ 52.783439][ C1] x23: ffff0001fea8e610 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 52.785604][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 52.787769][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 52.789814][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 52.791951][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 52.794114][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 52.796305][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 52.798427][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 52.800484][ C1] Call trace: [ 52.801397][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 52.802935][ C1] apply_to_page_range+0x4c/0x64 [ 52.804225][ C1] __change_memory_common+0xac/0x3f8 [ 52.805579][ C1] set_memory_valid+0x68/0x7c [ 52.806929][ C1] kfence_guarded_free+0x278/0x5a8 [ 52.808348][ C1] __kfence_free+0x104/0x198 [ 52.809559][ C1] kmem_cache_free+0x250/0x550 [ 52.810826][ C1] ptlock_free+0x54/0x6c [ 52.812097][ C1] __tlb_remove_table+0x30/0x274 [ 52.813399][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 52.814774][ C1] rcu_core+0x848/0x17a4 [ 52.815958][ C1] rcu_core_si+0x10/0x1c [ 52.817080][ C1] handle_softirqs+0x328/0xc88 [ 52.818316][ C1] __do_softirq+0x14/0x20 [ 52.819464][ C1] ____do_softirq+0x14/0x20 [ 52.820697][ C1] call_on_irq_stack+0x24/0x30 [ 52.821989][ C1] do_softirq_own_stack+0x20/0x2c [ 52.823349][ C1] __irq_exit_rcu+0x1b0/0x478 [ 52.824614][ C1] irq_exit_rcu+0x14/0x84 [ 52.825710][ C1] el1_interrupt+0x38/0x54 [ 52.826885][ C1] el1h_64_irq_handler+0x18/0x24 [ 52.828186][ C1] el1h_64_irq+0x6c/0x70 [ 52.829269][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 52.831003][ C1] pointer+0x4a8/0xdcc [ 52.832040][ C1] vsnprintf+0x5bc/0xd60 [ 52.833124][ C1] seq_printf+0x148/0x22c [ 52.834304][ C1] s_show+0x194/0x294 [ 52.835298][ C1] seq_read_iter+0x85c/0xc2c [ 52.836457][ C1] seq_read+0x238/0x33c [ 52.837554][ C1] proc_reg_read+0x17c/0x2d4 [ 52.838727][ C1] vfs_read+0x22c/0x898 [ 52.839842][ C1] ksys_read+0x120/0x210 [ 52.840892][ C1] __arm64_sys_read+0x7c/0x90 [ 52.842089][ C1] invoke_syscall+0x98/0x2b8 [ 52.843367][ C1] el0_svc_common+0x130/0x23c [ 52.844562][ C1] do_el0_svc+0x48/0x58 [ 52.845663][ C1] el0_svc+0x58/0x17c [ 52.846666][ C1] el0t_64_sync_handler+0x78/0x108 [ 52.847943][ C1] el0t_64_sync+0x198/0x19c [ 52.849123][ C1] irq event stamp: 329725 [ 52.850181][ C1] hardirqs last enabled at (329724): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 52.852882][ C1] hardirqs last disabled at (329725): [] el1_dbg+0x24/0x80 [ 52.855109][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 52.857629][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 52.860062][ C1] ---[ end trace 0000000000000000 ]--- [ 52.861665][ C1] ------------[ cut here ]------------ [ 52.861693][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 52.865786][ C1] Modules linked in: [ 52.866784][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 52.870099][ C1] Tainted: [W]=WARN [ 52.871104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.873656][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.875651][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 52.877185][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 52.878662][ C1] sp : ffff8000800178a0 [ 52.879722][ C1] x29: ffff8000800179c0 x28: ffff0001ffac4fff x27: ffff0001fec50fe8 [ 52.881806][ C1] x26: ffff0001ffac5000 x25: dfff800000000000 x24: ffff0001ffac4000 [ 52.883808][ C1] x23: ffff0001fea8e620 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 52.885994][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 52.888213][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 52.890358][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 52.892447][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 52.894619][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 52.896704][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 52.898760][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 52.900834][ C1] Call trace: [ 52.901713][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 52.903272][ C1] apply_to_page_range+0x4c/0x64 [ 52.904634][ C1] __change_memory_common+0xac/0x3f8 [ 52.906037][ C1] set_memory_valid+0x68/0x7c [ 52.907240][ C1] kfence_guarded_free+0x278/0x5a8 [ 52.908616][ C1] __kfence_free+0x104/0x198 [ 52.909844][ C1] kmem_cache_free+0x250/0x550 [ 52.911122][ C1] ptlock_free+0x54/0x6c [ 52.912198][ C1] __tlb_remove_table+0x30/0x274 [ 52.913508][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 52.914880][ C1] rcu_core+0x848/0x17a4 [ 52.916066][ C1] rcu_core_si+0x10/0x1c [ 52.917164][ C1] handle_softirqs+0x328/0xc88 [ 52.918469][ C1] __do_softirq+0x14/0x20 [ 52.919596][ C1] ____do_softirq+0x14/0x20 [ 52.920773][ C1] call_on_irq_stack+0x24/0x30 [ 52.921983][ C1] do_softirq_own_stack+0x20/0x2c [ 52.923297][ C1] __irq_exit_rcu+0x1b0/0x478 [ 52.924525][ C1] irq_exit_rcu+0x14/0x84 [ 52.925697][ C1] el1_interrupt+0x38/0x54 [ 52.926936][ C1] el1h_64_irq_handler+0x18/0x24 [ 52.928245][ C1] el1h_64_irq+0x6c/0x70 [ 52.929423][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 52.931346][ C1] pointer+0x4a8/0xdcc [ 52.932427][ C1] vsnprintf+0x5bc/0xd60 [ 52.933537][ C1] seq_printf+0x148/0x22c [ 52.934738][ C1] s_show+0x194/0x294 [ 52.935811][ C1] seq_read_iter+0x85c/0xc2c [ 52.937020][ C1] seq_read+0x238/0x33c [ 52.938140][ C1] proc_reg_read+0x17c/0x2d4 [ 52.939340][ C1] vfs_read+0x22c/0x898 [ 52.940442][ C1] ksys_read+0x120/0x210 [ 52.941644][ C1] __arm64_sys_read+0x7c/0x90 [ 52.942930][ C1] invoke_syscall+0x98/0x2b8 [ 52.944146][ C1] el0_svc_common+0x130/0x23c [ 52.945385][ C1] do_el0_svc+0x48/0x58 [ 52.946476][ C1] el0_svc+0x58/0x17c [ 52.947570][ C1] el0t_64_sync_handler+0x78/0x108 [ 52.948906][ C1] el0t_64_sync+0x198/0x19c [ 52.950128][ C1] irq event stamp: 329741 [ 52.951291][ C1] hardirqs last enabled at (329740): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 52.954143][ C1] hardirqs last disabled at (329741): [] el1_dbg+0x24/0x80 [ 52.956406][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 52.958992][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 52.961424][ C1] ---[ end trace 0000000000000000 ]--- [ 52.963052][ C1] ------------[ cut here ]------------ [ 52.963074][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 52.967370][ C1] Modules linked in: [ 52.968428][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 52.971914][ C1] Tainted: [W]=WARN [ 52.972948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.975663][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.977669][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 52.979190][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 52.980770][ C1] sp : ffff8000800178a0 [ 52.981896][ C1] x29: ffff8000800179c0 x28: ffff0001ffac6fff x27: ffff0001fec50fe8 [ 52.984067][ C1] x26: ffff0001ffac7000 x25: dfff800000000000 x24: ffff0001ffac6000 [ 52.986145][ C1] x23: ffff0001fea8e630 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 52.988280][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 52.990469][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 52.992585][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 52.994718][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 52.996827][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 52.998975][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 53.001127][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 53.003220][ C1] Call trace: [ 53.004220][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 53.005704][ C1] apply_to_page_range+0x4c/0x64 [ 53.007051][ C1] __change_memory_common+0xac/0x3f8 [ 53.008471][ C1] set_memory_valid+0x68/0x7c [ 53.009760][ C1] kfence_guarded_free+0x278/0x5a8 [ 53.011171][ C1] __kfence_free+0x104/0x198 [ 53.012327][ C1] kmem_cache_free+0x250/0x550 [ 53.013574][ C1] ptlock_free+0x54/0x6c [ 53.014658][ C1] __tlb_remove_table+0x30/0x274 [ 53.016017][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 53.017304][ C1] rcu_core+0x848/0x17a4 [ 53.018396][ C1] rcu_core_si+0x10/0x1c [ 53.019562][ C1] handle_softirqs+0x328/0xc88 [ 53.020805][ C1] __do_softirq+0x14/0x20 [ 53.021991][ C1] ____do_softirq+0x14/0x20 [ 53.023190][ C1] call_on_irq_stack+0x24/0x30 [ 53.024492][ C1] do_softirq_own_stack+0x20/0x2c [ 53.025844][ C1] __irq_exit_rcu+0x1b0/0x478 [ 53.027106][ C1] irq_exit_rcu+0x14/0x84 [ 53.028312][ C1] el1_interrupt+0x38/0x54 [ 53.029433][ C1] el1h_64_irq_handler+0x18/0x24 [ 53.030729][ C1] el1h_64_irq+0x6c/0x70 [ 53.031894][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 53.033757][ C1] pointer+0x4a8/0xdcc [ 53.034891][ C1] vsnprintf+0x5bc/0xd60 [ 53.036092][ C1] seq_printf+0x148/0x22c [ 53.037375][ C1] s_show+0x194/0x294 [ 53.038482][ C1] seq_read_iter+0x85c/0xc2c [ 53.039765][ C1] seq_read+0x238/0x33c [ 53.040823][ C1] proc_reg_read+0x17c/0x2d4 [ 53.042044][ C1] vfs_read+0x22c/0x898 [ 53.043234][ C1] ksys_read+0x120/0x210 [ 53.044474][ C1] __arm64_sys_read+0x7c/0x90 [ 53.045733][ C1] invoke_syscall+0x98/0x2b8 [ 53.046983][ C1] el0_svc_common+0x130/0x23c [ 53.048272][ C1] do_el0_svc+0x48/0x58 [ 53.049415][ C1] el0_svc+0x58/0x17c [ 53.050550][ C1] el0t_64_sync_handler+0x78/0x108 [ 53.051982][ C1] el0t_64_sync+0x198/0x19c [ 53.053220][ C1] irq event stamp: 329759 [ 53.054442][ C1] hardirqs last enabled at (329758): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 53.057494][ C1] hardirqs last disabled at (329759): [] el1_dbg+0x24/0x80 [ 53.060099][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 53.062796][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 53.065257][ C1] ---[ end trace 0000000000000000 ]--- [ 53.067111][ C1] ------------[ cut here ]------------ [ 53.067137][ C1] WARNING: CPU: 1 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 53.072284][ C1] Modules linked in: [ 53.073496][ C1] CPU: 1 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 53.077491][ C1] Tainted: [W]=WARN [ 53.078467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.081055][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 53.083172][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 53.084705][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 53.086315][ C1] sp : ffff8000800178a0 [ 53.087489][ C1] x29: ffff8000800179c0 x28: ffff0001ffaa8fff x27: ffff0001fec50fe8 [ 53.089614][ C1] x26: ffff0001ffaa9000 x25: dfff800000000000 x24: ffff0001ffaa8000 [ 53.091707][ C1] x23: ffff0001fea8e540 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 53.093854][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 53.095925][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 53.098167][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 53.100249][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 53.102391][ C1] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 53.104452][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 53.106819][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 53.109044][ C1] Call trace: [ 53.109925][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 53.111453][ C1] apply_to_page_range+0x4c/0x64 [ 53.112806][ C1] __change_memory_common+0xac/0x3f8 [ 53.114206][ C1] set_memory_valid+0x68/0x7c [ 53.115458][ C1] kfence_guarded_free+0x278/0x5a8 [ 53.116881][ C1] __kfence_free+0x104/0x198 [ 53.118085][ C1] kmem_cache_free+0x250/0x550 [ 53.119341][ C1] ptlock_free+0x54/0x6c [ 53.120491][ C1] __tlb_remove_table+0x30/0x274 [ 53.121837][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 53.123208][ C1] rcu_core+0x848/0x17a4 [ 53.124301][ C1] rcu_core_si+0x10/0x1c [ 53.125420][ C1] handle_softirqs+0x328/0xc88 [ 53.126693][ C1] __do_softirq+0x14/0x20 [ 53.127839][ C1] ____do_softirq+0x14/0x20 [ 53.129030][ C1] call_on_irq_stack+0x24/0x30 [ 53.130248][ C1] do_softirq_own_stack+0x20/0x2c [ 53.131629][ C1] __irq_exit_rcu+0x1b0/0x478 [ 53.132844][ C1] irq_exit_rcu+0x14/0x84 [ 53.133976][ C1] el1_interrupt+0x38/0x54 [ 53.135148][ C1] el1h_64_irq_handler+0x18/0x24 [ 53.136548][ C1] el1h_64_irq+0x6c/0x70 [ 53.137595][ C1] __CortexA53843419_FFFF8000805C0004+0xe10/0x2008 (P) [ 53.139436][ C1] pointer+0x4a8/0xdcc [ 53.140550][ C1] vsnprintf+0x5bc/0xd60 [ 53.141679][ C1] seq_printf+0x148/0x22c [ 53.142832][ C1] s_show+0x194/0x294 [ 53.143896][ C1] seq_read_iter+0x85c/0xc2c [ 53.145136][ C1] seq_read+0x238/0x33c [ 53.146270][ C1] proc_reg_read+0x17c/0x2d4 [ 53.147521][ C1] vfs_read+0x22c/0x898 [ 53.148744][ C1] ksys_read+0x120/0x210 [ 53.149917][ C1] __arm64_sys_read+0x7c/0x90 [ 53.151191][ C1] invoke_syscall+0x98/0x2b8 [ 53.152548][ C1] el0_svc_common+0x130/0x23c [ 53.153828][ C1] do_el0_svc+0x48/0x58 [ 53.154959][ C1] el0_svc+0x58/0x17c [ 53.156021][ C1] el0t_64_sync_handler+0x78/0x108 [ 53.157405][ C1] el0t_64_sync+0x198/0x19c [ 53.158652][ C1] irq event stamp: 329777 [ 53.159845][ C1] hardirqs last enabled at (329776): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 53.162735][ C1] hardirqs last disabled at (329777): [] el1_dbg+0x24/0x80 [ 53.165050][ C1] softirqs last enabled at (329042): [] handle_softirqs+0xaf8/0xc88 [ 53.167598][ C1] softirqs last disabled at (329595): [] __do_softirq+0x14/0x20 [ 53.170055][ C1] ---[ end trace 0000000000000000 ]--- [ 53.256153][ C0] ------------[ cut here ]------------ [ 53.256189][ C0] WARNING: CPU: 0 PID: 6497 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 53.260709][ C0] Modules linked in: [ 53.261758][ C0] CPU: 0 UID: 0 PID: 6497 Comm: syz-executor Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 53.265214][ C0] Tainted: [W]=WARN [ 53.266198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.268816][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 53.270872][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 53.272367][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 53.273861][ C0] sp : ffff800080007900 [ 53.274932][ C0] x29: ffff800080007a20 x28: ffff0001ffad0fff x27: ffff0001fec50fe8 [ 53.277053][ C0] x26: ffff0001ffad1000 x25: dfff800000000000 x24: ffff0001ffad0000 [ 53.279125][ C0] x23: ffff0001fea8e680 x22: 0000000000000100 x21: ffff0000d9ffbd00 [ 53.281191][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 53.283244][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 53.285338][ C0] x14: 1ffff00012dfb9fa x13: 0000000000000000 x12: 0000000000000000 [ 53.287460][ C0] x11: ffff700012dfb9fb x10: 0000000000ff0100 x9 : 0000000000000000 [ 53.289566][ C0] x8 : ffff0000d9ffbd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 53.291747][ C0] x5 : 0000000000000001 x4 : ffff800080007b00 x3 : ffff8000802595f4 [ 53.293808][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 53.295869][ C0] Call trace: [ 53.296759][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 53.298381][ C0] apply_to_page_range+0x4c/0x64 [ 53.299704][ C0] __change_memory_common+0xac/0x3f8 [ 53.301152][ C0] set_memory_valid+0x68/0x7c [ 53.302396][ C0] kfence_guarded_free+0x278/0x5a8 [ 53.303749][ C0] __kfence_free+0x104/0x198 [ 53.305067][ C0] kfree+0x268/0x474 [ 53.306102][ C0] slab_free_after_rcu_debug+0x78/0x2f4 [ 53.307595][ C0] rcu_core+0x848/0x17a4 [ 53.308784][ C0] rcu_core_si+0x10/0x1c [ 53.310027][ C0] handle_softirqs+0x328/0xc88 [ 53.311353][ C0] __do_softirq+0x14/0x20 [ 53.312513][ C0] ____do_softirq+0x14/0x20 [ 53.313808][ C0] call_on_irq_stack+0x24/0x30 [ 53.315090][ C0] do_softirq_own_stack+0x20/0x2c [ 53.316474][ C0] __irq_exit_rcu+0x1b0/0x478 [ 53.317784][ C0] irq_exit_rcu+0x14/0x84 [ 53.318936][ C0] el1_interrupt+0x38/0x54 [ 53.320176][ C0] el1h_64_irq_handler+0x18/0x24 [ 53.321468][ C0] el1h_64_irq+0x6c/0x70 [ 53.322574][ C0] unwind_find_stack+0x54/0x150 (P) [ 53.324087][ C0] arch_stack_walk+0x210/0x368 [ 53.325390][ C0] stack_trace_save+0x94/0xd8 [ 53.326589][ C0] kasan_save_track+0x40/0x78 [ 53.327821][ C0] kasan_save_alloc_info+0x44/0x54 [ 53.329199][ C0] __kasan_slab_alloc+0x70/0x88 [ 53.330548][ C0] kmem_cache_alloc_lru_noprof+0x23c/0x3ec [ 53.332201][ C0] __d_alloc+0x44/0x648 [ 53.333291][ C0] d_alloc_parallel+0x80/0x1110 [ 53.334618][ C0] __lookup_slow+0x104/0x378 [ 53.335840][ C0] lookup_slow+0x5c/0x80 [ 53.336965][ C0] walk_component+0x270/0x364 [ 53.338277][ C0] path_lookupat+0x13c/0x3d0 [ 53.339578][ C0] filename_lookup+0x1ac/0x454 [ 53.340933][ C0] vfs_statx+0xec/0x4c8 [ 53.342076][ C0] vfs_fstatat+0xd4/0x150 [ 53.343236][ C0] __arm64_sys_newfstatat+0x108/0x18c [ 53.344752][ C0] invoke_syscall+0x98/0x2b8 [ 53.346005][ C0] el0_svc_common+0x130/0x23c [ 53.347304][ C0] do_el0_svc+0x48/0x58 [ 53.348449][ C0] el0_svc+0x58/0x17c [ 53.349484][ C0] el0t_64_sync_handler+0x78/0x108 [ 53.350862][ C0] el0t_64_sync+0x198/0x19c [ 53.352138][ C0] irq event stamp: 349681 [ 53.353378][ C0] hardirqs last enabled at (349680): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 53.356312][ C0] hardirqs last disabled at (349681): [] el1_dbg+0x24/0x80 [ 53.358788][ C0] softirqs last enabled at (346282): [] handle_softirqs+0xaf8/0xc88 [ 53.361447][ C0] softirqs last disabled at (349663): [] __do_softirq+0x14/0x20 [ 53.364003][ C0] ---[ end trace 0000000000000000 ]--- [ 53.532410][ T6497] cgroup: Unknown subsys name 'net' [ 53.728312][ T6497] cgroup: Unknown subsys name 'cpuset' [ 53.731863][ T6497] cgroup: Unknown subsys name 'rlimit' [ 54.006170][ C1] ------------[ cut here ]------------ [ 54.006207][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 54.010376][ C1] Modules linked in: [ 54.011334][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.014547][ C1] Tainted: [W]=WARN [ 54.015501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.018073][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.020119][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 54.021614][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 54.023183][ C1] sp : ffff800080017900 [ 54.024236][ C1] x29: ffff800080017a20 x28: ffff0001ffadcfff x27: ffff0001fec50fe8 [ 54.026345][ C1] x26: ffff0001ffadd000 x25: dfff800000000000 x24: ffff0001ffadc000 [ 54.028435][ C1] x23: ffff0001fea8e6e0 x22: 0000000000000100 x21: ffff0000c1a0db80 [ 54.030518][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 54.032582][ C1] x17: ffff80010d10c000 x16: ffff80008051bab8 x15: 0000000000000001 [ 54.034703][ C1] x14: 1ffff00012dfb9fa x13: 0000000000000000 x12: 0000000000000000 [ 54.036795][ C1] x11: ffff700012dfb9fb x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.038906][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 54.041021][ C1] x5 : 0000000000000001 x4 : ffff800080017b00 x3 : ffff8000802595f4 [ 54.043107][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.045162][ C1] Call trace: [ 54.046006][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 54.047496][ C1] apply_to_page_range+0x4c/0x64 [ 54.048826][ C1] __change_memory_common+0xac/0x3f8 [ 54.050229][ C1] set_memory_valid+0x68/0x7c [ 54.051465][ C1] kfence_guarded_free+0x278/0x5a8 [ 54.052818][ C1] __kfence_free+0x104/0x198 [ 54.054006][ C1] kfree+0x268/0x474 [ 54.055000][ C1] slab_free_after_rcu_debug+0x78/0x2f4 [ 54.056497][ C1] rcu_core+0x848/0x17a4 [ 54.057597][ C1] rcu_core_si+0x10/0x1c [ 54.058695][ C1] handle_softirqs+0x328/0xc88 [ 54.059916][ C1] __do_softirq+0x14/0x20 [ 54.061049][ C1] ____do_softirq+0x14/0x20 [ 54.062219][ C1] call_on_irq_stack+0x24/0x30 [ 54.063480][ C1] do_softirq_own_stack+0x20/0x2c [ 54.064834][ C1] __irq_exit_rcu+0x1b0/0x478 [ 54.066060][ C1] irq_exit_rcu+0x14/0x84 [ 54.067246][ C1] el1_interrupt+0x38/0x54 [ 54.068534][ C1] el1h_64_irq_handler+0x18/0x24 [ 54.069922][ C1] el1h_64_irq+0x6c/0x70 [ 54.071070][ C1] arch_local_irq_enable+0x8/0xc (P) [ 54.072531][ C1] do_idle+0x1d8/0x454 [ 54.073661][ C1] cpu_startup_entry+0x5c/0x74 [ 54.074995][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 54.076454][ C1] __secondary_switched+0xc0/0xc4 [ 54.077855][ C1] irq event stamp: 199391 [ 54.078997][ C1] hardirqs last enabled at (199390): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 54.081947][ C1] hardirqs last disabled at (199391): [] el1_dbg+0x24/0x80 [ 54.084455][ C1] softirqs last enabled at (199332): [] handle_softirqs+0xaf8/0xc88 [ 54.087115][ C1] softirqs last disabled at (199351): [] __do_softirq+0x14/0x20 [ 54.089488][ C1] ---[ end trace 0000000000000000 ]--- [ 54.122747][ T6497] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 54.586180][ C0] ------------[ cut here ]------------ [ 54.586216][ C0] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 54.590663][ C0] Modules linked in: [ 54.591646][ C0] CPU: 0 UID: 0 PID: 6499 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.595130][ C0] Tainted: [W]=WARN [ 54.596127][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.598795][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.600989][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 54.602492][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 54.604019][ C0] sp : ffff8000800078a0 [ 54.605092][ C0] x29: ffff8000800079c0 x28: ffff0001ffae0fff x27: ffff0001fec50fe8 [ 54.607246][ C0] x26: ffff0001ffae1000 x25: dfff800000000000 x24: ffff0001ffae0000 [ 54.609433][ C0] x23: ffff0001fea8e700 x22: 0000000000000100 x21: ffff0000c9dabd00 [ 54.611611][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 54.613779][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 54.615951][ C0] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 54.618083][ C0] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.620291][ C0] x8 : ffff0000c9dabd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 54.622458][ C0] x5 : 0000000000000001 x4 : ffff800080007aa0 x3 : ffff8000802595f4 [ 54.624642][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.626857][ C0] Call trace: [ 54.627710][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 54.629360][ C0] apply_to_page_range+0x4c/0x64 [ 54.630728][ C0] __change_memory_common+0xac/0x3f8 [ 54.632336][ C0] set_memory_valid+0x68/0x7c [ 54.633691][ C0] kfence_guarded_free+0x278/0x5a8 [ 54.635050][ C0] __kfence_free+0x104/0x198 [ 54.636351][ C0] kmem_cache_free+0x250/0x550 [ 54.637701][ C0] ptlock_free+0x54/0x6c [ 54.638845][ C0] __tlb_remove_table+0x30/0x274 [ 54.640207][ C0] tlb_remove_table_rcu+0x8c/0x19c [ 54.641696][ C0] rcu_core+0x848/0x17a4 [ 54.642881][ C0] rcu_core_si+0x10/0x1c [ 54.644134][ C0] handle_softirqs+0x328/0xc88 [ 54.645442][ C0] __do_softirq+0x14/0x20 [ 54.646608][ C0] ____do_softirq+0x14/0x20 [ 54.647829][ C0] call_on_irq_stack+0x24/0x30 [ 54.649102][ C0] do_softirq_own_stack+0x20/0x2c [ 54.650446][ C0] __irq_exit_rcu+0x1b0/0x478 [ 54.651971][ C0] irq_exit_rcu+0x14/0x84 [ 54.653224][ C0] el1_interrupt+0x38/0x54 [ 54.654425][ C0] el1h_64_irq_handler+0x18/0x24 [ 54.655812][ C0] el1h_64_irq+0x6c/0x70 [ 54.657021][ C0] __pi_memset_generic+0x8c/0x188 (P) [ 54.658544][ C0] smack_task_kill+0xa4/0x1d0 [ 54.659908][ C0] security_task_kill+0xf4/0x318 [ 54.661249][ C0] check_kill_permission+0x2ec/0x474 [ 54.662854][ C0] do_send_specific+0x13c/0x2cc [ 54.664200][ C0] __arm64_sys_tgkill+0x12c/0x188 [ 54.665700][ C0] invoke_syscall+0x98/0x2b8 [ 54.666932][ C0] el0_svc_common+0x130/0x23c [ 54.668237][ C0] do_el0_svc+0x48/0x58 [ 54.669423][ C0] el0_svc+0x58/0x17c [ 54.670461][ C0] el0t_64_sync_handler+0x78/0x108 [ 54.671931][ C0] el0t_64_sync+0x198/0x19c [ 54.673135][ C0] irq event stamp: 27607 [ 54.674324][ C0] hardirqs last enabled at (27606): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 54.677201][ C0] hardirqs last disabled at (27607): [] el1_dbg+0x24/0x80 [ 54.679547][ C0] softirqs last enabled at (25446): [] local_bh_enable+0x10/0x34 [ 54.682185][ C0] softirqs last disabled at (27523): [] __do_softirq+0x14/0x20 [ 54.684597][ C0] ---[ end trace 0000000000000000 ]--- [ 54.686386][ C0] ------------[ cut here ]------------ [ 54.686407][ C0] WARNING: CPU: 0 PID: 6499 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 54.690770][ C0] Modules linked in: [ 54.691797][ C0] CPU: 0 UID: 0 PID: 6499 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.695373][ C0] Tainted: [W]=WARN [ 54.696408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.699153][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.701282][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 54.702858][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 54.704413][ C0] sp : ffff800080007900 [ 54.705558][ C0] x29: ffff800080007a20 x28: ffff0001ffae6fff x27: ffff0001fec50fe8 [ 54.707770][ C0] x26: ffff0001ffae7000 x25: dfff800000000000 x24: ffff0001ffae6000 [ 54.709948][ C0] x23: ffff0001fea8e730 x22: 0000000000000100 x21: ffff0000c9dabd00 [ 54.712080][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 0000000000000000 [ 54.714231][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 54.716422][ C0] x14: 1ffff00012dfb9c7 x13: 0000000000000000 x12: 0000000000000000 [ 54.718656][ C0] x11: ffff700012dfb9c8 x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.720880][ C0] x8 : ffff0000c9dabd00 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 54.723052][ C0] x5 : 0000000000000001 x4 : ffff800080007b00 x3 : ffff8000802595f4 [ 54.725330][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.727534][ C0] Call trace: [ 54.728481][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 54.730057][ C0] apply_to_page_range+0x4c/0x64 [ 54.731439][ C0] __change_memory_common+0xac/0x3f8 [ 54.732937][ C0] set_memory_valid+0x68/0x7c [ 54.734502][ C0] kfence_guarded_free+0x278/0x5a8 [ 54.735974][ C0] __kfence_free+0x104/0x198 [ 54.737303][ C0] kfree+0x268/0x474 [ 54.738393][ C0] slab_free_after_rcu_debug+0x78/0x2f4 [ 54.740020][ C0] rcu_core+0x848/0x17a4 [ 54.741248][ C0] rcu_core_si+0x10/0x1c [ 54.742392][ C0] handle_softirqs+0x328/0xc88 [ 54.743754][ C0] __do_softirq+0x14/0x20 [ 54.745002][ C0] ____do_softirq+0x14/0x20 [ 54.746222][ C0] call_on_irq_stack+0x24/0x30 [ 54.747554][ C0] do_softirq_own_stack+0x20/0x2c [ 54.748956][ C0] __irq_exit_rcu+0x1b0/0x478 [ 54.750244][ C0] irq_exit_rcu+0x14/0x84 [ 54.751448][ C0] el1_interrupt+0x38/0x54 [ 54.752658][ C0] el1h_64_irq_handler+0x18/0x24 [ 54.754017][ C0] el1h_64_irq+0x6c/0x70 [ 54.755205][ C0] __pi_memset_generic+0x8c/0x188 (P) [ 54.756773][ C0] smack_task_kill+0xa4/0x1d0 [ 54.758038][ C0] security_task_kill+0xf4/0x318 [ 54.759318][ C0] check_kill_permission+0x2ec/0x474 [ 54.760784][ C0] do_send_specific+0x13c/0x2cc [ 54.762117][ C0] __arm64_sys_tgkill+0x12c/0x188 [ 54.763428][ C0] invoke_syscall+0x98/0x2b8 [ 54.764746][ C0] el0_svc_common+0x130/0x23c [ 54.765991][ C0] do_el0_svc+0x48/0x58 [ 54.767184][ C0] el0_svc+0x58/0x17c [ 54.768229][ C0] el0t_64_sync_handler+0x78/0x108 [ 54.769582][ C0] el0t_64_sync+0x198/0x19c [ 54.770773][ C0] irq event stamp: 27703 [ 54.771951][ C0] hardirqs last enabled at (27702): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 54.774733][ C0] hardirqs last disabled at (27703): [] el1_dbg+0x24/0x80 [ 54.777079][ C0] softirqs last enabled at (25446): [] local_bh_enable+0x10/0x34 [ 54.779522][ C0] softirqs last disabled at (27523): [] __do_softirq+0x14/0x20 [ 54.781982][ C0] ---[ end trace 0000000000000000 ]--- [ 54.783765][ C0] ------------[ cut here ]------------ [ 54.783979][ C0] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 54.788450][ C0] Modules linked in: [ 54.789685][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.793273][ C0] Tainted: [W]=WARN [ 54.794310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.797041][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.799210][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 54.800761][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 54.802207][ C0] sp : ffff8000976870a0 [ 54.803399][ C0] x29: ffff8000976871c0 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 [ 54.805480][ C0] x26: ffff0001ffae9000 x25: dfff800000000000 x24: ffff0001ffae8000 [ 54.807640][ C0] x23: ffff0001fea8e740 x22: 0000000000000100 x21: ffff0000c19f3d00 [ 54.809842][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 54.811927][ C0] x17: ffff800092f37000 x16: ffff80008adb82bc x15: ffff700012ed0e5c [ 54.814124][ C0] x14: 1ffff00012ed0e5c x13: 0000000000000004 x12: ffffffffffffffff [ 54.816233][ C0] x11: 00000000dc88a375 x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.818386][ C0] x8 : ffff0000c19f3d00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 54.820604][ C0] x5 : 0000000000000001 x4 : ffff8000976872a0 x3 : ffff8000802595f4 [ 54.822723][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.824912][ C0] Call trace: [ 54.825798][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 54.827354][ C0] apply_to_page_range+0x4c/0x64 [ 54.828689][ C0] __change_memory_common+0xac/0x3f8 [ 54.830118][ C0] set_memory_valid+0x68/0x7c [ 54.831381][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 54.832764][ C0] __kfence_alloc+0x394/0x45c [ 54.834078][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 54.835641][ C0] __alloc_skb+0x144/0x2ec [ 54.836844][ C0] __tcp_send_ack+0xa4/0x55c [ 54.838106][ C0] tcp_send_ack+0x50/0x6c [ 54.839407][ C0] tcp_delack_timer_handler+0x280/0x444 [ 54.840897][ C0] tcp_delack_timer+0x238/0x3c4 [ 54.842372][ C0] call_timer_fn+0x1b4/0x818 [ 54.843641][ C0] __run_timer_base+0x51c/0x76c [ 54.844950][ C0] run_timer_softirq+0xcc/0x194 [ 54.846218][ C0] handle_softirqs+0x328/0xc88 [ 54.847593][ C0] run_ksoftirqd+0x70/0xc0 [ 54.848827][ C0] smpboot_thread_fn+0x4d8/0x9cc [ 54.850161][ C0] kthread+0x5fc/0x75c [ 54.851205][ C0] ret_from_fork+0x10/0x20 [ 54.852422][ C0] irq event stamp: 638147 [ 54.853606][ C0] hardirqs last enabled at (638146): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 54.856357][ C0] hardirqs last disabled at (638147): [] kfence_guarded_alloc+0x190/0xb08 [ 54.859057][ C0] softirqs last enabled at (638132): [] handle_softirqs+0xaf8/0xc88 [ 54.861630][ C0] softirqs last disabled at (638137): [] run_ksoftirqd+0x70/0xc0 [ 54.864189][ C0] ---[ end trace 0000000000000000 ]--- [ 54.865659][ C0] ------------[ cut here ]------------ [ 54.865682][ C0] WARNING: CPU: 0 PID: 15 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 54.870085][ C0] Modules linked in: [ 54.871198][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.874883][ C0] Tainted: [W]=WARN [ 54.875930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.878641][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.880745][ C0] pc : change_page_range+0x188/0x1cc [ 54.882129][ C0] lr : change_page_range+0x188/0x1cc [ 54.883552][ C0] sp : ffff800097687060 [ 54.884624][ C0] x29: ffff800097687060 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 [ 54.886731][ C0] x26: ffff0001ffae9000 x25: ffff0001ffae8000 x24: ffff0001ffae8000 [ 54.888903][ C0] x23: 006800023fae8707 x22: 0040000000000001 x21: dfff800000000000 [ 54.891099][ C0] x20: 0000000000000100 x19: ffff0000c19f3d00 x18: 00000000ffffffff [ 54.893379][ C0] x17: ffff800092f37000 x16: ffff80008adb82bc x15: 0000000000000001 [ 54.895061][ C0] x14: 1fffe0001833e7a0 x13: 0000000000000000 x12: 0000000000000000 [ 54.896694][ C0] x11: ffff60001833e7a1 x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.898356][ C0] x8 : ffff0000c19f3d00 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 54.900473][ C0] x5 : 0000000000000001 x4 : ffff8000976872a0 x3 : ffff800080ac62d0 [ 54.902620][ C0] x2 : ffff8000976872a0 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.904786][ C0] Call trace: [ 54.905665][ C0] change_page_range+0x188/0x1cc (P) [ 54.907078][ C0] __apply_to_page_range+0xd58/0x13e4 [ 54.908607][ C0] apply_to_page_range+0x4c/0x64 [ 54.910002][ C0] __change_memory_common+0xac/0x3f8 [ 54.911423][ C0] set_memory_valid+0x68/0x7c [ 54.912692][ C0] kfence_guarded_alloc+0x2e8/0xb08 [ 54.914087][ C0] __kfence_alloc+0x394/0x45c [ 54.915299][ C0] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 54.916935][ C0] __alloc_skb+0x144/0x2ec [ 54.918141][ C0] __tcp_send_ack+0xa4/0x55c [ 54.919384][ C0] tcp_send_ack+0x50/0x6c [ 54.920559][ C0] tcp_delack_timer_handler+0x280/0x444 [ 54.922063][ C0] tcp_delack_timer+0x238/0x3c4 [ 54.923364][ C0] call_timer_fn+0x1b4/0x818 [ 54.924562][ C0] __run_timer_base+0x51c/0x76c [ 54.925950][ C0] run_timer_softirq+0xcc/0x194 [ 54.927264][ C0] handle_softirqs+0x328/0xc88 [ 54.928546][ C0] run_ksoftirqd+0x70/0xc0 [ 54.929735][ C0] smpboot_thread_fn+0x4d8/0x9cc [ 54.931088][ C0] kthread+0x5fc/0x75c [ 54.932151][ C0] ret_from_fork+0x10/0x20 [ 54.933302][ C0] irq event stamp: 638147 [ 54.934413][ C0] hardirqs last enabled at (638146): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 54.937211][ C0] hardirqs last disabled at (638147): [] kfence_guarded_alloc+0x190/0xb08 [ 54.939889][ C0] softirqs last enabled at (638132): [] handle_softirqs+0xaf8/0xc88 [ 54.942417][ C0] softirqs last disabled at (638137): [] run_ksoftirqd+0x70/0xc0 [ 54.944953][ C0] ---[ end trace 0000000000000000 ]--- [ 54.947091][ C0] ------------[ cut here ]------------ [ 54.947118][ C0] WARNING: CPU: 0 PID: 6096 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 54.951531][ C0] Modules linked in: [ 54.952585][ C0] CPU: 0 UID: 0 PID: 6096 Comm: klogd Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 54.955970][ C0] Tainted: [W]=WARN [ 54.956993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.959641][ C0] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 54.961847][ C0] pc : __apply_to_page_range+0xdb4/0x13e4 [ 54.963402][ C0] lr : __apply_to_page_range+0xdb4/0x13e4 [ 54.965024][ C0] sp : ffff800080006da0 [ 54.966133][ C0] x29: ffff800080006ec0 x28: ffff0001ffae8fff x27: ffff0001fec50fe8 [ 54.968289][ C0] x26: ffff0001ffae9000 x25: dfff800000000000 x24: ffff0001ffae8000 [ 54.970575][ C0] x23: ffff0001fea8e740 x22: 0000000000000100 x21: ffff0000d9785b80 [ 54.972750][ C0] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 54.974987][ C0] x17: ffff80010d0e8000 x16: ffff80008051bab8 x15: 0000000000000001 [ 54.977223][ C0] x14: 1ffff00012dfb9d1 x13: 0000000000000000 x12: 0000000000000000 [ 54.979408][ C0] x11: ffff700012dfb9d2 x10: 0000000000ff0100 x9 : 0000000000000000 [ 54.981638][ C0] x8 : ffff0000d9785b80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 54.983779][ C0] x5 : 0000000000000001 x4 : ffff800080006fa0 x3 : ffff8000802595f4 [ 54.985942][ C0] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 54.988113][ C0] Call trace: [ 54.989021][ C0] __apply_to_page_range+0xdb4/0x13e4 (P) [ 54.990546][ C0] apply_to_page_range+0x4c/0x64 [ 54.991965][ C0] __change_memory_common+0xac/0x3f8 [ 54.993444][ C0] set_memory_valid+0x68/0x7c [ 54.994812][ C0] kfence_guarded_free+0x278/0x5a8 [ 54.996202][ C0] __kfence_free+0x104/0x198 [ 54.997387][ C0] kmem_cache_free+0x250/0x550 [ 54.998681][ C0] kfree_skbmem+0x14c/0x1dc [ 54.999897][ C0] __kfree_skb+0x60/0x78 [ 55.001016][ C0] tcp_data_queue+0x170/0x46f4 [ 55.002344][ C0] tcp_rcv_established+0xd40/0x1cc0 [ 55.003717][ C0] tcp_v4_do_rcv+0x3c0/0xbc4 [ 55.004925][ C0] tcp_v4_rcv+0x202c/0x28b8 [ 55.006079][ C0] ip_protocol_deliver_rcu+0x1f8/0x484 [ 55.007538][ C0] ip_local_deliver_finish+0x27c/0x4e8 [ 55.009064][ C0] NF_HOOK+0x2c4/0x358 [ 55.010111][ C0] ip_local_deliver+0x120/0x194 [ 55.011467][ C0] ip_rcv_finish+0x21c/0x248 [ 55.012740][ C0] NF_HOOK+0x2c4/0x358 [ 55.013844][ C0] ip_rcv+0x7c/0x9c [ 55.014886][ C0] __netif_receive_skb+0xcc/0x2a8 [ 55.016252][ C0] process_backlog+0x60c/0x10e4 [ 55.017576][ C0] __napi_poll+0xb4/0x3fc [ 55.018722][ C0] net_rx_action+0x5d4/0xcc8 [ 55.019984][ C0] handle_softirqs+0x328/0xc88 [ 55.021281][ C0] __do_softirq+0x14/0x20 [ 55.022442][ C0] ____do_softirq+0x14/0x20 [ 55.023682][ C0] call_on_irq_stack+0x24/0x30 [ 55.024985][ C0] do_softirq_own_stack+0x20/0x2c [ 55.026377][ C0] do_softirq+0x90/0xf8 [ 55.027498][ C0] __local_bh_enable_ip+0x240/0x35c [ 55.028939][ C0] local_bh_enable+0x28/0x34 [ 55.030180][ C0] fpsimd_restore_current_state+0x1d4/0x708 [ 55.031821][ C0] do_notify_resume+0x144/0x1ec [ 55.033168][ C0] el0_svc+0xb4/0x17c [ 55.034243][ C0] el0t_64_sync_handler+0x78/0x108 [ 55.035664][ C0] el0t_64_sync+0x198/0x19c [ 55.036840][ C0] irq event stamp: 168275 [ 55.038102][ C0] hardirqs last enabled at (168274): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.040993][ C0] hardirqs last disabled at (168275): [] el1_dbg+0x24/0x80 [ 55.043376][ C0] softirqs last enabled at (168238): [] local_bh_enable+0x10/0x34 [ 55.046109][ C0] softirqs last disabled at (168239): [] __do_softirq+0x14/0x20 [ 55.048615][ C0] ---[ end trace 0000000000000000 ]--- [ 55.079318][ C1] ------------[ cut here ]------------ [ 55.079436][ C1] WARNING: CPU: 1 PID: 6493 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 55.083859][ C1] Modules linked in: [ 55.084950][ C1] CPU: 1 UID: 0 PID: 6493 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.088438][ C1] Tainted: [W]=WARN [ 55.089501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.092042][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.094029][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 55.095514][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 55.097040][ C1] sp : ffff8000800175c0 [ 55.098086][ C1] x29: ffff8000800176e0 x28: ffff0001ffaeafff x27: ffff0001fec50fe8 [ 55.100135][ C1] x26: ffff0001ffaeb000 x25: dfff800000000000 x24: ffff0001ffaea000 [ 55.102249][ C1] x23: ffff0001fea8e750 x22: 0000000000000100 x21: ffff0000d9ff9e80 [ 55.104285][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 55.106378][ C1] x17: ffff800092f37000 x16: ffff80008051bab8 x15: 0000000000000001 [ 55.108392][ C1] x14: 1ffff00012dfb98c x13: 0000000000000000 x12: 0000000000000000 [ 55.110426][ C1] x11: ffff700012dfb98d x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.112425][ C1] x8 : ffff0000d9ff9e80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 55.114547][ C1] x5 : 0000000000000001 x4 : ffff8000800177c0 x3 : ffff8000802595f4 [ 55.116591][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 55.118652][ C1] Call trace: [ 55.119464][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 55.120959][ C1] apply_to_page_range+0x4c/0x64 [ 55.122232][ C1] __change_memory_common+0xac/0x3f8 [ 55.123681][ C1] set_memory_valid+0x68/0x7c [ 55.124966][ C1] kfence_guarded_free+0x278/0x5a8 [ 55.126297][ C1] __kfence_free+0x104/0x198 [ 55.127606][ C1] kmem_cache_free+0x250/0x550 [ 55.128827][ C1] kfree_skbmem+0x14c/0x1dc [ 55.130005][ C1] __kfree_skb+0x60/0x78 [ 55.131066][ C1] tcp_wmem_free_skb+0x258/0x400 [ 55.132328][ C1] tcp_write_xmit+0x720/0x51a8 [ 55.133583][ C1] tcp_tsq_write+0x1d0/0x2bc [ 55.134837][ C1] tcp_tsq_handler+0x15c/0x234 [ 55.136220][ C1] tcp_pace_kick+0x28/0xd8 [ 55.137395][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 55.138844][ C1] hrtimer_run_softirq+0x160/0x400 [ 55.140204][ C1] handle_softirqs+0x328/0xc88 [ 55.141487][ C1] __do_softirq+0x14/0x20 [ 55.142654][ C1] ____do_softirq+0x14/0x20 [ 55.143877][ C1] call_on_irq_stack+0x24/0x30 [ 55.145165][ C1] do_softirq_own_stack+0x20/0x2c [ 55.146523][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.147776][ C1] irq_exit_rcu+0x14/0x84 [ 55.148894][ C1] el1_interrupt+0x38/0x54 [ 55.150078][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.151408][ C1] el1h_64_irq+0x6c/0x70 [ 55.152524][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 55.153940][ C1] finish_task_switch+0x120/0x5a4 [ 55.155251][ C1] __schedule+0x13b4/0x28d4 [ 55.156419][ C1] schedule+0xb4/0x230 [ 55.157512][ C1] schedule_hrtimeout_range_clock+0x124/0x2b4 [ 55.159105][ C1] schedule_hrtimeout_range+0x38/0x4c [ 55.160603][ C1] ep_poll+0xa70/0xd38 [ 55.161662][ C1] do_epoll_wait+0x194/0x204 [ 55.162922][ C1] do_epoll_pwait+0x70/0x18c [ 55.164208][ C1] __arm64_sys_epoll_pwait+0x1e0/0x234 [ 55.165619][ C1] invoke_syscall+0x98/0x2b8 [ 55.166859][ C1] el0_svc_common+0x130/0x23c [ 55.168076][ C1] do_el0_svc+0x48/0x58 [ 55.169173][ C1] el0_svc+0x58/0x17c [ 55.170182][ C1] el0t_64_sync_handler+0x78/0x108 [ 55.171532][ C1] el0t_64_sync+0x198/0x19c [ 55.172733][ C1] irq event stamp: 99395 [ 55.173928][ C1] hardirqs last enabled at (99394): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.176810][ C1] hardirqs last disabled at (99395): [] el1_dbg+0x24/0x80 [ 55.179160][ C1] softirqs last enabled at (99356): [] release_sock+0x14c/0x1ac [ 55.181600][ C1] softirqs last disabled at (99381): [] __do_softirq+0x14/0x20 [ 55.184002][ C1] ---[ end trace 0000000000000000 ]--- [ 55.186369][ C1] ------------[ cut here ]------------ [ 55.186577][ C1] WARNING: CPU: 1 PID: 6493 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 55.190949][ C1] Modules linked in: [ 55.192024][ C1] CPU: 1 UID: 0 PID: 6493 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.194897][ C1] Tainted: [W]=WARN [ 55.195722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.198019][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.199794][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 55.201083][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 55.202398][ C1] sp : ffff8000800164e0 [ 55.203352][ C1] x29: ffff800080016600 x28: ffff0001ffaecfff x27: ffff0001fec50fe8 [ 55.205482][ C1] x26: ffff0001ffaed000 x25: dfff800000000000 x24: ffff0001ffaec000 [ 55.207728][ C1] x23: ffff0001fea8e760 x22: 0000000000000300 x21: ffff0000d9ff9e80 [ 55.209843][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 55.212059][ C1] x17: ffff800092f37000 x16: ffff80008adb82bc x15: ffff700010002ce4 [ 55.214266][ C1] x14: 1ffff00010002ce4 x13: 0000000000000004 x12: ffffffffffffffff [ 55.216510][ C1] x11: 000000008329ffee x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.218666][ C1] x8 : ffff0000d9ff9e80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 55.220881][ C1] x5 : 0000000000000001 x4 : ffff8000800166e0 x3 : ffff8000802595f4 [ 55.223141][ C1] x2 : 0000000000001000 x1 : 0000000000000300 x0 : 0000000000000000 [ 55.225342][ C1] Call trace: [ 55.226167][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 55.227707][ C1] apply_to_page_range+0x4c/0x64 [ 55.229058][ C1] __change_memory_common+0xac/0x3f8 [ 55.230547][ C1] set_memory_valid+0x68/0x7c [ 55.231774][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 55.233121][ C1] __kfence_alloc+0x394/0x45c [ 55.234322][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 55.235800][ C1] kmalloc_reserve+0xc4/0x268 [ 55.237031][ C1] __alloc_skb+0x170/0x2ec [ 55.238206][ C1] skb_segment+0xb94/0x343c [ 55.239380][ C1] tcp_gso_segment+0x310/0x1528 [ 55.240636][ C1] tcp4_gso_segment+0x460/0xe54 [ 55.241918][ C1] inet_gso_segment+0x548/0x11bc [ 55.243193][ C1] skb_mac_gso_segment+0x2c8/0x5b0 [ 55.244683][ C1] __skb_gso_segment+0x29c/0x448 [ 55.246017][ C1] validate_xmit_skb+0x414/0xc84 [ 55.247341][ C1] __dev_queue_xmit+0x1114/0x31f0 [ 55.248683][ C1] ip_finish_output2+0xd80/0x1240 [ 55.249972][ C1] __ip_finish_output+0x1b0/0x44c [ 55.251334][ C1] ip_finish_output+0x44/0x304 [ 55.252697][ C1] ip_output+0x194/0x20c [ 55.253944][ C1] __ip_queue_xmit+0xdcc/0x173c [ 55.255184][ C1] ip_queue_xmit+0x5c/0x7c [ 55.256518][ C1] __tcp_transmit_skb+0x17f8/0x2e68 [ 55.257970][ C1] tcp_write_xmit+0x14d8/0x51a8 [ 55.259382][ C1] tcp_tsq_write+0x1d0/0x2bc [ 55.260601][ C1] tcp_tsq_handler+0x15c/0x234 [ 55.261868][ C1] tcp_pace_kick+0x28/0xd8 [ 55.263096][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 55.264464][ C1] hrtimer_run_softirq+0x160/0x400 [ 55.265935][ C1] handle_softirqs+0x328/0xc88 [ 55.267263][ C1] __do_softirq+0x14/0x20 [ 55.268374][ C1] ____do_softirq+0x14/0x20 [ 55.269630][ C1] call_on_irq_stack+0x24/0x30 [ 55.270941][ C1] do_softirq_own_stack+0x20/0x2c [ 55.272354][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.273585][ C1] irq_exit_rcu+0x14/0x84 [ 55.274874][ C1] el1_interrupt+0x38/0x54 [ 55.276108][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.277369][ C1] el1h_64_irq+0x6c/0x70 [ 55.278578][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 55.280110][ C1] finish_task_switch+0x120/0x5a4 [ 55.281481][ C1] __schedule+0x13b4/0x28d4 [ 55.282734][ C1] schedule+0xb4/0x230 [ 55.283812][ C1] schedule_hrtimeout_range_clock+0x124/0x2b4 [ 55.285417][ C1] schedule_hrtimeout_range+0x38/0x4c [ 55.286904][ C1] ep_poll+0xa70/0xd38 [ 55.288068][ C1] do_epoll_wait+0x194/0x204 [ 55.289323][ C1] do_epoll_pwait+0x70/0x18c [ 55.290524][ C1] __arm64_sys_epoll_pwait+0x1e0/0x234 [ 55.292086][ C1] invoke_syscall+0x98/0x2b8 [ 55.293278][ C1] el0_svc_common+0x130/0x23c [ 55.294487][ C1] do_el0_svc+0x48/0x58 [ 55.295646][ C1] el0_svc+0x58/0x17c [ 55.296746][ C1] el0t_64_sync_handler+0x78/0x108 [ 55.298189][ C1] el0t_64_sync+0x198/0x19c [ 55.299389][ C1] irq event stamp: 99641 [ 55.300488][ C1] hardirqs last enabled at (99640): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.303264][ C1] hardirqs last disabled at (99641): [] kfence_guarded_alloc+0x190/0xb08 [ 55.305940][ C1] softirqs last enabled at (99430): [] handle_softirqs+0xaf8/0xc88 [ 55.308528][ C1] softirqs last disabled at (99433): [] __do_softirq+0x14/0x20 [ 55.310992][ C1] ---[ end trace 0000000000000000 ]--- [ 55.312443][ C1] ------------[ cut here ]------------ [ 55.312458][ C1] WARNING: CPU: 1 PID: 6493 at ./arch/arm64/include/asm/pgtable.h:67 change_page_range+0x188/0x1cc [ 55.316891][ C1] Modules linked in: [ 55.317928][ C1] CPU: 1 UID: 0 PID: 6493 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.321438][ C1] Tainted: [W]=WARN [ 55.322399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.325203][ C1] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.327325][ C1] pc : change_page_range+0x188/0x1cc [ 55.328718][ C1] lr : change_page_range+0x188/0x1cc [ 55.330188][ C1] sp : ffff8000800164a0 [ 55.331271][ C1] x29: ffff8000800164a0 x28: ffff0001ffaecfff x27: ffff0001fec50fe8 [ 55.333458][ C1] x26: ffff0001ffaed000 x25: ffff0001ffaec000 x24: ffff0001ffaec000 [ 55.335648][ C1] x23: 006800023faec707 x22: 0040000000000001 x21: dfff800000000000 [ 55.337881][ C1] x20: 0000000000000300 x19: ffff0000d9ff9e80 x18: 00000000ffffffff [ 55.340075][ C1] x17: ffff800092f37000 x16: ffff80008adb82bc x15: 0000000000000001 [ 55.342173][ C1] x14: 1fffe0001b3ff3d0 x13: 0000000000000000 x12: 0000000000000000 [ 55.344359][ C1] x11: ffff60001b3ff3d1 x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.346463][ C1] x8 : ffff0000d9ff9e80 x7 : ffff800080c2c30c x6 : 0000000000000000 [ 55.348579][ C1] x5 : 0000000000000001 x4 : ffff8000800166e0 x3 : ffff800080ac62d0 [ 55.350832][ C1] x2 : ffff8000800166e0 x1 : 0000000000000300 x0 : 0000000000000000 [ 55.352969][ C1] Call trace: [ 55.353861][ C1] change_page_range+0x188/0x1cc (P) [ 55.355443][ C1] __apply_to_page_range+0xd58/0x13e4 [ 55.356998][ C1] apply_to_page_range+0x4c/0x64 [ 55.358363][ C1] __change_memory_common+0xac/0x3f8 [ 55.359745][ C1] set_memory_valid+0x68/0x7c [ 55.360949][ C1] kfence_guarded_alloc+0x2e8/0xb08 [ 55.362288][ C1] __kfence_alloc+0x394/0x45c [ 55.363529][ C1] kmem_cache_alloc_node_noprof+0x34c/0x3f4 [ 55.365123][ C1] kmalloc_reserve+0xc4/0x268 [ 55.366430][ C1] __alloc_skb+0x170/0x2ec [ 55.367576][ C1] skb_segment+0xb94/0x343c [ 55.368776][ C1] tcp_gso_segment+0x310/0x1528 [ 55.370030][ C1] tcp4_gso_segment+0x460/0xe54 [ 55.371334][ C1] inet_gso_segment+0x548/0x11bc [ 55.372641][ C1] skb_mac_gso_segment+0x2c8/0x5b0 [ 55.374013][ C1] __skb_gso_segment+0x29c/0x448 [ 55.375298][ C1] validate_xmit_skb+0x414/0xc84 [ 55.376661][ C1] __dev_queue_xmit+0x1114/0x31f0 [ 55.378001][ C1] ip_finish_output2+0xd80/0x1240 [ 55.379360][ C1] __ip_finish_output+0x1b0/0x44c [ 55.380628][ C1] ip_finish_output+0x44/0x304 [ 55.381987][ C1] ip_output+0x194/0x20c [ 55.383105][ C1] __ip_queue_xmit+0xdcc/0x173c [ 55.384419][ C1] ip_queue_xmit+0x5c/0x7c [ 55.385630][ C1] __tcp_transmit_skb+0x17f8/0x2e68 [ 55.387068][ C1] tcp_write_xmit+0x14d8/0x51a8 [ 55.388388][ C1] tcp_tsq_write+0x1d0/0x2bc [ 55.389597][ C1] tcp_tsq_handler+0x15c/0x234 [ 55.390888][ C1] tcp_pace_kick+0x28/0xd8 [ 55.392047][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 55.393494][ C1] hrtimer_run_softirq+0x160/0x400 [ 55.394935][ C1] handle_softirqs+0x328/0xc88 [ 55.396324][ C1] __do_softirq+0x14/0x20 [ 55.397527][ C1] ____do_softirq+0x14/0x20 [ 55.398749][ C1] call_on_irq_stack+0x24/0x30 [ 55.400097][ C1] do_softirq_own_stack+0x20/0x2c [ 55.401435][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.402819][ C1] irq_exit_rcu+0x14/0x84 [ 55.403963][ C1] el1_interrupt+0x38/0x54 [ 55.405117][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.406505][ C1] el1h_64_irq+0x6c/0x70 [ 55.407657][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 55.409121][ C1] finish_task_switch+0x120/0x5a4 [ 55.410515][ C1] __schedule+0x13b4/0x28d4 [ 55.411748][ C1] schedule+0xb4/0x230 [ 55.412840][ C1] schedule_hrtimeout_range_clock+0x124/0x2b4 [ 55.414502][ C1] schedule_hrtimeout_range+0x38/0x4c [ 55.415920][ C1] ep_poll+0xa70/0xd38 [ 55.416986][ C1] do_epoll_wait+0x194/0x204 [ 55.418320][ C1] do_epoll_pwait+0x70/0x18c [ 55.419632][ C1] __arm64_sys_epoll_pwait+0x1e0/0x234 [ 55.421129][ C1] invoke_syscall+0x98/0x2b8 [ 55.422449][ C1] el0_svc_common+0x130/0x23c [ 55.423774][ C1] do_el0_svc+0x48/0x58 [ 55.424881][ C1] el0_svc+0x58/0x17c [ 55.425980][ C1] el0t_64_sync_handler+0x78/0x108 [ 55.427433][ C1] el0t_64_sync+0x198/0x19c [ 55.428741][ C1] irq event stamp: 99641 [ 55.429921][ C1] hardirqs last enabled at (99640): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.432776][ C1] hardirqs last disabled at (99641): [] kfence_guarded_alloc+0x190/0xb08 [ 55.435457][ C1] softirqs last enabled at (99430): [] handle_softirqs+0xaf8/0xc88 [ 55.438047][ C1] softirqs last disabled at (99433): [] __do_softirq+0x14/0x20 [ 55.440470][ C1] ---[ end trace 0000000000000000 ]--- [ 55.442566][ C1] ------------[ cut here ]------------ [ 55.442590][ C1] WARNING: CPU: 1 PID: 6493 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 55.447188][ C1] Modules linked in: [ 55.448367][ C1] CPU: 1 UID: 0 PID: 6493 Comm: syz-execprog Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.452069][ C1] Tainted: [W]=WARN [ 55.453091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.455843][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.457998][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 55.459527][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 55.461045][ C1] sp : ffff800080016d00 [ 55.462173][ C1] x29: ffff800080016e20 x28: ffff0001ffaecfff x27: ffff0001fec50fe8 [ 55.464347][ C1] x26: ffff0001ffaed000 x25: dfff800000000000 x24: ffff0001ffaec000 [ 55.466601][ C1] x23: ffff0001fea8e760 x22: 0000000000000100 x21: ffff0000d9ff9e80 [ 55.468964][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 00000000ffffffff [ 55.471176][ C1] x17: ffff800092f37000 x16: ffff80008051bab8 x15: 0000000000000001 [ 55.473522][ C1] x14: 1ffff00012dfb99e x13: 0000000000000000 x12: 0000000000000000 [ 55.475719][ C1] x11: ffff700012dfb99f x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.477887][ C1] x8 : ffff0000d9ff9e80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 55.480148][ C1] x5 : 0000000000000001 x4 : ffff800080016f00 x3 : ffff8000802595f4 [ 55.482425][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 55.484630][ C1] Call trace: [ 55.485497][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 55.487063][ C1] apply_to_page_range+0x4c/0x64 [ 55.488435][ C1] __change_memory_common+0xac/0x3f8 [ 55.489858][ C1] set_memory_valid+0x68/0x7c [ 55.491078][ C1] kfence_guarded_free+0x278/0x5a8 [ 55.492484][ C1] __kfence_free+0x104/0x198 [ 55.493748][ C1] kmem_cache_free+0x250/0x550 [ 55.495038][ C1] skb_free_head+0xbc/0x198 [ 55.496250][ C1] skb_release_data+0x66c/0x820 [ 55.497586][ C1] kfree_skb_partial+0x9c/0xc0 [ 55.498896][ C1] tcp_data_queue+0x1670/0x46f4 [ 55.500207][ C1] tcp_rcv_established+0xd40/0x1cc0 [ 55.501565][ C1] tcp_v4_do_rcv+0x3c0/0xbc4 [ 55.502804][ C1] tcp_v4_rcv+0x202c/0x28b8 [ 55.504009][ C1] ip_protocol_deliver_rcu+0x1f8/0x484 [ 55.505461][ C1] ip_local_deliver_finish+0x27c/0x4e8 [ 55.506934][ C1] NF_HOOK+0x2c4/0x358 [ 55.508006][ C1] ip_local_deliver+0x120/0x194 [ 55.509299][ C1] ip_rcv_finish+0x21c/0x248 [ 55.510580][ C1] NF_HOOK+0x2c4/0x358 [ 55.511796][ C1] ip_rcv+0x7c/0x9c [ 55.512814][ C1] __netif_receive_skb+0xcc/0x2a8 [ 55.514269][ C1] process_backlog+0x60c/0x10e4 [ 55.515572][ C1] __napi_poll+0xb4/0x3fc [ 55.516698][ C1] net_rx_action+0x5d4/0xcc8 [ 55.517946][ C1] handle_softirqs+0x328/0xc88 [ 55.519222][ C1] __do_softirq+0x14/0x20 [ 55.520380][ C1] ____do_softirq+0x14/0x20 [ 55.521613][ C1] call_on_irq_stack+0x24/0x30 [ 55.522968][ C1] do_softirq_own_stack+0x20/0x2c [ 55.524366][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.525713][ C1] irq_exit_rcu+0x14/0x84 [ 55.526945][ C1] el1_interrupt+0x38/0x54 [ 55.528108][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.529474][ C1] el1h_64_irq+0x6c/0x70 [ 55.530593][ C1] finish_lock_switch+0xb4/0x1c0 (P) [ 55.532168][ C1] finish_task_switch+0x120/0x5a4 [ 55.533521][ C1] __schedule+0x13b4/0x28d4 [ 55.534651][ C1] schedule+0xb4/0x230 [ 55.535825][ C1] schedule_hrtimeout_range_clock+0x124/0x2b4 [ 55.537532][ C1] schedule_hrtimeout_range+0x38/0x4c [ 55.539042][ C1] ep_poll+0xa70/0xd38 [ 55.540180][ C1] do_epoll_wait+0x194/0x204 [ 55.541397][ C1] do_epoll_pwait+0x70/0x18c [ 55.542650][ C1] __arm64_sys_epoll_pwait+0x1e0/0x234 [ 55.544145][ C1] invoke_syscall+0x98/0x2b8 [ 55.545345][ C1] el0_svc_common+0x130/0x23c [ 55.546705][ C1] do_el0_svc+0x48/0x58 [ 55.547948][ C1] el0_svc+0x58/0x17c [ 55.548953][ C1] el0t_64_sync_handler+0x78/0x108 [ 55.550345][ C1] el0t_64_sync+0x198/0x19c [ 55.551613][ C1] irq event stamp: 99721 [ 55.552738][ C1] hardirqs last enabled at (99720): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.555626][ C1] hardirqs last disabled at (99721): [] el1_dbg+0x24/0x80 [ 55.558077][ C1] softirqs last enabled at (99668): [] handle_softirqs+0xaf8/0xc88 [ 55.560702][ C1] softirqs last disabled at (99671): [] __do_softirq+0x14/0x20 [ 55.563211][ C1] ---[ end trace 0000000000000000 ]--- [ 55.706167][ C1] ------------[ cut here ]------------ [ 55.706207][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 55.710392][ C1] Modules linked in: [ 55.711402][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.714621][ C1] Tainted: [W]=WARN [ 55.715599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.718195][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.720191][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 55.721672][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 55.723138][ C1] sp : ffff8000800178a0 [ 55.724284][ C1] x29: ffff8000800179c0 x28: ffff0001ffae2fff x27: ffff0001fec50fe8 [ 55.726397][ C1] x26: ffff0001ffae3000 x25: dfff800000000000 x24: ffff0001ffae2000 [ 55.728478][ C1] x23: ffff0001fea8e710 x22: 0000000000000100 x21: ffff0000c1a0db80 [ 55.730534][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 55.732740][ C1] x17: 0000000000000000 x16: ffff80008051bab8 x15: 0000000000000001 [ 55.734793][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 55.736879][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.738890][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 55.740938][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 55.742962][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 55.745061][ C1] Call trace: [ 55.745887][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 55.747469][ C1] apply_to_page_range+0x4c/0x64 [ 55.748831][ C1] __change_memory_common+0xac/0x3f8 [ 55.750237][ C1] set_memory_valid+0x68/0x7c [ 55.751523][ C1] kfence_guarded_free+0x278/0x5a8 [ 55.752923][ C1] __kfence_free+0x104/0x198 [ 55.754185][ C1] kmem_cache_free+0x250/0x550 [ 55.755441][ C1] ptlock_free+0x54/0x6c [ 55.756493][ C1] __tlb_remove_table+0x30/0x274 [ 55.757894][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 55.759271][ C1] rcu_core+0x848/0x17a4 [ 55.760527][ C1] rcu_core_si+0x10/0x1c [ 55.761709][ C1] handle_softirqs+0x328/0xc88 [ 55.763030][ C1] __do_softirq+0x14/0x20 [ 55.764224][ C1] ____do_softirq+0x14/0x20 [ 55.765370][ C1] call_on_irq_stack+0x24/0x30 [ 55.766702][ C1] do_softirq_own_stack+0x20/0x2c [ 55.768061][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.769370][ C1] irq_exit_rcu+0x14/0x84 [ 55.770559][ C1] el1_interrupt+0x38/0x54 [ 55.771711][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.773100][ C1] el1h_64_irq+0x6c/0x70 [ 55.774238][ C1] arch_local_irq_enable+0x8/0xc (P) [ 55.775701][ C1] do_idle+0x1d8/0x454 [ 55.776801][ C1] cpu_startup_entry+0x5c/0x74 [ 55.778073][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 55.779525][ C1] __secondary_switched+0xc0/0xc4 [ 55.780849][ C1] irq event stamp: 200515 [ 55.781955][ C1] hardirqs last enabled at (200514): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.784811][ C1] hardirqs last disabled at (200515): [] el1_dbg+0x24/0x80 [ 55.787185][ C1] softirqs last enabled at (200346): [] handle_softirqs+0xaf8/0xc88 [ 55.789838][ C1] softirqs last disabled at (200485): [] __do_softirq+0x14/0x20 [ 55.792280][ C1] ---[ end trace 0000000000000000 ]--- [ 55.794062][ C1] ------------[ cut here ]------------ [ 55.794084][ C1] WARNING: CPU: 1 PID: 0 at ./arch/arm64/include/asm/pgtable.h:82 __apply_to_page_range+0xdb4/0x13e4 [ 55.798402][ C1] Modules linked in: [ 55.799457][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.15.0-rc5-syzkaller-00074-gac57c6b0f09c #0 PREEMPT [ 55.802899][ C1] Tainted: [W]=WARN [ 55.803959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.806693][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 55.808813][ C1] pc : __apply_to_page_range+0xdb4/0x13e4 [ 55.810286][ C1] lr : __apply_to_page_range+0xdb4/0x13e4 [ 55.811765][ C1] sp : ffff8000800178a0 [ 55.812844][ C1] x29: ffff8000800179c0 x28: ffff0001ffae4fff x27: ffff0001fec50fe8 [ 55.815129][ C1] x26: ffff0001ffae5000 x25: dfff800000000000 x24: ffff0001ffae4000 [ 55.817232][ C1] x23: ffff0001fea8e720 x22: 0000000000000100 x21: ffff0000c1a0db80 [ 55.819379][ C1] x20: 100000023ea8e403 x19: 0000000000000001 x18: 1fffe0003386f276 [ 55.821476][ C1] x17: 0000000000000000 x16: ffff80008051bab8 x15: 0000000000000001 [ 55.823637][ C1] x14: 1ffff00012dfb9fc x13: 0000000000000000 x12: 0000000000000000 [ 55.825811][ C1] x11: ffff700012dfb9fd x10: 0000000000ff0100 x9 : 0000000000000000 [ 55.827934][ C1] x8 : ffff0000c1a0db80 x7 : ffff800080c2b0a4 x6 : 0000000000000000 [ 55.830002][ C1] x5 : 0000000000000001 x4 : ffff800080017aa0 x3 : ffff8000802595f4 [ 55.832184][ C1] x2 : 0000000000001000 x1 : 0000000000000100 x0 : 0000000000000000 [ 55.834276][ C1] Call trace: [ 55.835186][ C1] __apply_to_page_range+0xdb4/0x13e4 (P) [ 55.836773][ C1] apply_to_page_range+0x4c/0x64 [ 55.838145][ C1] __change_memory_common+0xac/0x3f8 [ 55.839599][ C1] set_memory_valid+0x68/0x7c [ 55.840850][ C1] kfence_guarded_free+0x278/0x5a8 [ 55.842235][ C1] __kfence_free+0x104/0x198 [ 55.843494][ C1] kmem_cache_free+0x250/0x550 [ 55.844813][ C1] ptlock_free+0x54/0x6c [ 55.845923][ C1] __tlb_remove_table+0x30/0x274 [ 55.847202][ C1] tlb_remove_table_rcu+0x8c/0x19c [ 55.848536][ C1] rcu_core+0x848/0x17a4 [ 55.849637][ C1] rcu_core_si+0x10/0x1c [ 55.850712][ C1] handle_softirqs+0x328/0xc88 [ 55.852052][ C1] __do_softirq+0x14/0x20 [ 55.853267][ C1] ____do_softirq+0x14/0x20 [ 55.854459][ C1] call_on_irq_stack+0x24/0x30 [ 55.855741][ C1] do_softirq_own_stack+0x20/0x2c [ 55.857091][ C1] __irq_exit_rcu+0x1b0/0x478 [ 55.858340][ C1] irq_exit_rcu+0x14/0x84 [ 55.859493][ C1] el1_interrupt+0x38/0x54 [ 55.860710][ C1] el1h_64_irq_handler+0x18/0x24 [ 55.862041][ C1] el1h_64_irq+0x6c/0x70 [ 55.863119][ C1] arch_local_irq_enable+0x8/0xc (P) [ 55.864578][ C1] do_idle+0x1d8/0x454 [ 55.865654][ C1] cpu_startup_entry+0x5c/0x74 [ 55.866971][ C1] secondary_start_kernel+0x1b8/0x1e0 [ 55.868348][ C1] __secondary_switched+0xc0/0xc4 [ 55.869715][ C1] irq event stamp: 200621 [ 55.870892][ C1] hardirqs last enabled at (200620): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 55.873657][ C1] hardirqs last disabled at (200621): [] el1_dbg+0x24/0x80 [ 55.876009][ C1] softirqs last enabled at (200346): [] handle_softirqs+0xaf8/0xc88 [ 55.878574][ C1] softirqs last disabled at (200485): [] __do_softirq+0x14/0x20 [ 55.881058][ C1] ---[ end trace 0000000000000000 ]--- syzkaller build log: go env (err=) GO111MODULE='auto' GOARCH='amd64' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFLAGS='' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs-2/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.22.7' GCCGO='gccgo' GOAMD64='v1' AR='ar' CC='gcc' CXX='g++' CGO_ENABLED='1' GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod' GOWORK='' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' PKG_CONFIG='pkg-config' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build929726086=/tmp/go-build -gno-record-gcc-switches' git status (err=) HEAD detached at 9750182a9a6 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen go fmt ./sys/... >/dev/null touch .descriptions GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=9750182a9a67f35e95cb1e077a3b69a4a9b54083 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240906-140235'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_arm64 aarch64-linux-gnu-g++ -o ./bin/linux_arm64/syz-executor executor/executor.cc \ -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -fpermissive -w -DGOOS_linux=1 -DGOARCH_arm64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"9750182a9a67f35e95cb1e077a3b69a4a9b54083\" /usr/lib/gcc-cross/aarch64-linux-gnu/12/../../../../aarch64-linux-gnu/bin/ld: /tmp/ccfjzU85.o: in function `test_cover_filter()': executor.cc:(.text+0x1054c): warning: the use of `tempnam' is dangerous, better use `mkstemp' /usr/lib/gcc-cross/aarch64-linux-gnu/12/../../../../aarch64-linux-gnu/bin/ld: /tmp/ccfjzU85.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0xd8): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking