BUG: unable to handle kernel paging request in folio_memcg Unable to handle kernel paging request at virtual address dfff800000000001 KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [dfff800000000001] address between user and kernel address ranges Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 57 Comm: kworker/u4:1 Not tainted 6.5.0-rc7-syzkaller-00063-g35e2132122ba-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : PageTail include/linux/page-flags.h:284 [inline] pc : folio_memcg_kmem include/linux/memcontrol.h:544 [inline] pc : folio_memcg+0x2c/0x174 include/linux/memcontrol.h:431 lr : folio_lruvec include/linux/memcontrol.h:755 [inline] lr : folio_lruvec_lock_irqsave+0x28/0x268 mm/memcontrol.c:1369 sp : ffff800095917910 x29: ffff800095917910 x28: 0000000000000001 x27: dfff800000000000 x26: ffff700012b22f6c x25: 0000000000000000 x24: 1fffe0003683c938 x23: 0000000000000001 x22: dfff800000000000 x21: 1ffff00012b22f38 x20: 0000000000000008 x19: 0000000000000000 x18: ffff8000959177c0 x17: ffff800080a9bb38 x16: ffff80008a575470 x15: 0000000000000001 x14: 1ffff0001229f3a8 x13: dfff800000000000 x12: 0000000000000000 x11: 0000000000000001 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff0000c3ed0000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff800091553b50 x4 : 0000000000000002 x3 : ffff800080318494 x2 : 0000000000000001 x1 : ffff8000959179e0 x0 : 0000000000000000 Call trace: PageTail include/linux/page-flags.h:284 [inline] folio_memcg_kmem include/linux/memcontrol.h:544 [inline] folio_memcg+0x2c/0x174 include/linux/memcontrol.h:431 folio_lruvec include/linux/memcontrol.h:755 [inline] folio_lruvec_lock_irqsave+0x28/0x268 mm/memcontrol.c:1369 folio_lruvec_relock_irqsave include/linux/memcontrol.h:1665 [inline] folio_batch_move_lru+0x280/0x4cc mm/swap.c:216 lru_add_drain_cpu+0xb8/0x4b0 mm/swap.c:652 lru_add_drain+0x8c/0x168 mm/swap.c:752 exit_mmap+0x1b0/0xb04 mm/mmap.c:3198 __mmput+0xec/0x390 kernel/fork.c:1348 mmput+0x70/0xac kernel/fork.c:1370 free_bprm+0x128/0x324 fs/exec.c:1491 kernel_execve+0x328/0x7f0 fs/exec.c:2025 call_usermodehelper_exec_async+0x21c/0x370 kernel/umh.c:110 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853 Code: 91002014 f2fbfff6 d343fe97 aa0003f3 (38766ae8) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 91002014 add x20, x0, #0x8 4: f2fbfff6 movk x22, #0xdfff, lsl #48 8: d343fe97 lsr x23, x20, #3 c: aa0003f3 mov x19, x0 * 10: 38766ae8 ldrb w8, [x23, x22] <-- trapping instruction failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.159" "pwd"]: exit status 255 ssh: connect to host 10.128.1.159 port 22: Connection timed out Pseudo-terminal will not be allocated because stdin is not a terminal. Warning: Permanently added '[ssh-serialport.googleapis.com]:9600' (RSA) to the list of known hosts. serialport: Connected to syzkaller.us-central1-a.ci-upstream-gce-arm64-test-job-parallel-1 port 1 (session ID: 4c7d4cd6b256a9a327fe3995518aad7e72d4a7733a99c5c3b18535e7f858f6f4, active connections: 1). UEFI firmware (version built at 09:37:21 on Jul 26 2023) EMU Variable FVB Started EMU Variable invalid PCD sizes Found PL031 RTC @ 0x9010000 InitializeRealTimeClock: using default timezone/daylight settings [=3h[=3hBdsDxe: loading Boot0001 "UEFI Misc Device" from PciRoot(0x0)/Pci(0x2,0x0)/NVMe(0x1,00-00-00-00-00-00-00-00) BdsDxe: starting Boot0001 "UEFI Misc Device" from PciRoot(0x0)/Pci(0x2,0x0)/NVMe(0x1,00-00-00-00-00-00-00-00) UEFI: Attempting to start image. Description: UEFI Misc Device FilePath: PciRoot(0x0)/Pci(0x2,0x0)/NVMe(0x1,00-00-00-00-00-00-00-00) OptionNumber: 1. Welcome to GRUB!  Booting `syzkaller' EFI stub: Booting Linux Kernel... EFI stub: Using DTB from configuration table EFI stub: Exiting boot services... [ 0.000000][ T0] Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] [ 0.000000][ T0] Linux version 6.5.0-rc7-syzkaller-00063-g35e2132122ba-dirty (syzkaller@syzkaller) (Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40) #0 SMP PREEMPT now [ 0.000000][ T0] efi: EFI v2.7 by EDK II [ 0.000000][ T0] efi: SMBIOS 3.0=0x23fe80000 ACPI 2.0=0x23c590018 MEMATTR=0x23e882a98 RNG=0x23c59e398 MEMRESERVE=0x23c4e5e98 [ 0.000000][ T0] random: crng init done [ 0.000000][ T0] ACPI: Early table checksum verification disabled [ 0.000000][ T0] ACPI: RSDP 0x000000023C590018 000024 (v02 Google) [ 0.000000][ T0] ACPI: XSDT 0x000000023C59FE98 00007C (v01 Google GOOGFACP 00000001 01000013) [ 0.000000][ T0] ACPI: FACP 0x000000023C597518 000114 (v06 Google GOOGFACP 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: DSDT 0x000000023C59E998 000D26 (v02 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: SSDT 0x000000023C59FA98 000316 (v02 GOOGLE Tpm2Tabl 00001000 INTL 20211217) [ 0.000000][ T0] ACPI: TPM2 0x000000023C59FF98 000034 (v04 GOOGLE 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: SRAT 0x000000023C59E898 0000A4 (v03 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: SPCR 0x000000023C59E498 000050 (v02 Google GOOGSPCR 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: APIC 0x000000023C59E518 000108 (v05 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: GTDT 0x000000023C59E698 000068 (v03 Google GOOGGTDT 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: MCFG 0x000000023C59E798 00003C (v01 Google GOOGMCFG 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: IORT 0x000000023C59DA18 000084 (v01 Google GOOGIORT 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: PPTT 0x000000023C59E198 000060 (v02 Google GOOGPPTT 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: DBG2 0x000000023C59E298 00005D (v00 Google GOOGDBG2 00000001 GOOG 00000001) [ 0.000000][ T0] ACPI: SPCR: console: pl011,mmio,0x9000000,9600 [ 0.000000][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x07ffffff] [ 0.000000][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000-0x23fffffff] [ 0.000000][ T0] NUMA: NODE_DATA [mem 0x23ea74c00-0x23ea77fff] [ 0.000000][ T0] Zone ranges: [ 0.000000][ T0] DMA [mem 0x0000000040000000-0x00000000ffffffff] [ 0.000000][ T0] DMA32 empty [ 0.000000][ T0] Normal [mem 0x0000000100000000-0x000000023fffffff] [ 0.000000][ T0] Device empty [ 0.000000][ T0] Movable zone start for each node [ 0.000000][ T0] Early memory node ranges [ 0.000000][ T0] node 0: [mem 0x0000000040000000-0x000000023c59ffff] [ 0.000000][ T0] node 0: [mem 0x000000023c5a0000-0x000000023c72ffff] [ 0.000000][ T0] node 0: [mem 0x000000023c730000-0x000000023fbfffff] [ 0.000000][ T0] node 0: [mem 0x000000023fc00000-0x000000023ffdffff] [ 0.000000][ T0] node 0: [mem 0x000000023ffe0000-0x000000023fffffff] [ 0.000000][ T0] Initmem setup node 0 [mem 0x0000000040000000-0x000000023fffffff] [ 0.000000][ T0] cma: Reserved 32 MiB at 0x00000000fe000000 [ 0.000000][ T0] kasan: KernelAddressSanitizer initialized (generic) [ 0.000000][ T0] psci: probing for conduit method from ACPI. [ 0.000000][ T0] psci: PSCIv1.0 detected in firmware. [ 0.000000][ T0] psci: Using standard PSCI v0.2 function IDs [ 0.000000][ T0] psci: Trusted OS migration not required [ 0.000000][ T0] psci: SMC Calling Convention v1.1 [ 0.000000][ T0] smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) [ 0.000000][ T0] ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node 0 [ 0.000000][ T0] ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node 0 [ 0.000000][ T0] percpu: Embedded 34 pages/cpu s100040 r8192 d31032 u139264 [ 0.000000][ T0] Detected PIPT I-cache on CPU0 [ 0.000000][ T0] CPU features: detected: GIC system register CPU interface [ 0.000000][ T0] CPU features: detected: Hardware dirty bit management [ 0.000000][ T0] CPU features: detected: Spectre-v4 [ 0.000000][ T0] CPU features: detected: Spectre-BHB [ 0.000000][ T0] CPU features: detected: ARM erratum 1418040 [ 0.000000][ T0] alternatives: applying boot alternatives [ 0.000000][ T0] Kernel command line: BOOT_IMAGE=/Image.gz root=PARTLABEL=root enforcing=0 console=ttyS0 [ 0.000000][ T0] Unknown kernel command line parameters "BOOT_IMAGE=/Image.gz enforcing=0", will be passed to user space. [ 0.000000][ T0] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) [ 0.000000][ T0] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) [ 0.000000][ T0] Fallback order for Node 0: 0 [ 0.000000][ T0] Built 1 zonelists, mobility grouping on. Total pages: 2064384 [ 0.000000][ T0] Policy zone: Normal [ 0.000000][ T0] mem auto-init: stack:all(zero), heap alloc:on, heap free:off [ 0.000000][ T0] stackdepot: allocating hash table via alloc_large_system_hash [ 0.000000][ T0] stackdepot hash table entries: 1048576 (order: 11, 8388608 bytes, linear) [ 0.000000][ T0] software IO TLB: area num 2. [ 0.000000][ T0] software IO TLB: mapped [mem 0x00000000fa000000-0x00000000fe000000] (64MB) [ 0.000000][ T0] Memory: 6721376K/8388608K available (170368K kernel code, 48550K rwdata, 54768K rodata, 4096K init, 26399K bss, 1634464K reserved, 32768K cma-reserved) [ 0.000000][ T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000][ T0] allocated 16777216 bytes of page_ext [ 0.000000][ T0] trace event string verifier disabled [ 0.000000][ T0] Running RCU self tests [ 0.000000][ T0] Running RCU synchronous self tests [ 0.000000][ T0] rcu: Preemptible hierarchical RCU implementation. [ 0.000000][ T0] rcu: RCU lockdep checking is enabled. [ 0.000000][ T0] rcu: RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 0.000000][ T0] rcu: RCU callback double-/use-after-free debug is enabled. [ 0.000000][ T0] rcu: RCU debug extended QS entry/exit. [ 0.000000][ T0] Trampoline variant of Tasks RCU enabled. [ 0.000000][ T0] Tracing variant of Tasks RCU enabled. [ 0.000000][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000][ T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 [ 0.000000][ T0] Running RCU synchronous self tests [ 0.000000][ T0] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 [ 0.000000][ T0] GICv3: 96 SPIs implemented [ 0.000000][ T0] GICv3: 0 Extended SPIs implemented [ 0.000000][ T0] Root IRQ handler: gic_handle_irq [ 0.000000][ T0] GICv3: GICv3 features: 16 PPIs [ 0.000000][ T0] GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 [ 0.000000][ T0] ITS [mem 0x08080000-0x0809ffff] [ 0.000000][ T0] ITS@0x0000000008080000: allocated 8192 Devices @101800000 (indirect, esz 8, psz 64K, shr 1) [ 0.000000][ T0] ITS@0x0000000008080000: allocated 8192 Interrupt Collections @101810000 (flat, esz 8, psz 64K, shr 1) [ 0.000000][ T0] GICv3: using LPI property table @0x0000000101820000 [ 0.000000][ T0] GICv3: CPU0: using allocated LPI pending table @0x0000000101830000 [ 0.000000][ T0] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000][ T0] arch_timer: Enabling local workaround for ARM erratum 1418040 [ 0.000000][ T0] arch_timer: cp15 timer(s) running at 25.00MHz (virt). [ 0.000000][ T0] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns [ 0.000000][ T0] sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns [ 0.000254][ T0] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____) [ 0.002314][ T0] Console: colour dummy device 80x25 [ 0.002351][ T0] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 0.002359][ T0] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 0.002366][ T0] ... MAX_LOCK_DEPTH: 48 [ 0.002374][ T0] ... MAX_LOCKDEP_KEYS: 8192 [ 0.002381][ T0] ... CLASSHASH_SIZE: 4096 [ 0.002388][ T0] ... MAX_LOCKDEP_ENTRIES: 131072 [ 0.002395][ T0] ... MAX_LOCKDEP_CHAINS: 65536 [ 0.002403][ T0] ... CHAINHASH_SIZE: 32768 [ 0.002410][ T0] memory used by lock dependency info: 11881 kB [ 0.002417][ T0] memory used for stack traces: 8320 kB [ 0.002425][ T0] per task-struct memory footprint: 1920 bytes [ 0.002510][ T0] ACPI: Core revision 20230331 [ 0.002782][ T0] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000) [ 0.002804][ T0] pid_max: default: 32768 minimum: 301 [ 0.002972][ T0] LSM: initializing lsm=lockdown,capability,landlock,yama,safesetid,tomoyo,smack,integrity [ 0.003077][ T0] landlock: Up and running. [ 0.003084][ T0] Yama: becoming mindful. [ 0.003159][ T0] TOMOYO Linux initialized [ 0.003202][ T0] Smack: Initializing. [ 0.003208][ T0] Smack: Netfilter enabled. [ 0.003215][ T0] Smack: IPv6 Netfilter enabled. [ 0.006995][ T0] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 0.007020][ T0] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 0.012199][ T0] Running RCU synchronous self tests [ 0.012217][ T0] Running RCU synchronous self tests [ 0.015122][ T1] RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1. [ 0.015406][ T1] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1. [ 0.015625][ T1] Running RCU-tasks wait API self tests [ 0.132279][ T1] rcu: Hierarchical SRCU implementation. [ 0.132292][ T1] rcu: Max phase no-delay instances is 1000. [ 0.136988][ T1] Platform MSI: ITS@0x8080000 domain created [ 0.137039][ T1] PCI/MSI: ITS@0x8080000 domain created [ 0.137081][ T1] fsl-mc MSI: ITS@0x8080000 domain created [ 0.137178][ T1] Remapping and enabling EFI services. [ 0.138107][ T1] smp: Bringing up secondary CPUs ... [ 0.179230][ T0] Detected PIPT I-cache on CPU1 [ 0.179280][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 0.179323][ T0] GICv3: CPU1: using allocated LPI pending table @0x0000000101840000 [ 0.179357][ T0] arch_timer: Enabling local workaround for ARM erratum 1418040 [ 0.179415][ T0] CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] [ 0.179981][ T1] smp: Brought up 1 node, 2 CPUs [ 0.180281][ T1] SMP: Total of 2 processors activated. [ 0.180295][ T1] CPU features: detected: Data cache clean to the PoU not required for I/D coherence [ 0.180305][ T1] CPU features: detected: Common not Private translations [ 0.180313][ T1] CPU features: detected: CRC32 instructions [ 0.180321][ T1] CPU features: detected: Data cache clean to Point of Persistence [ 0.180332][ T1] CPU features: detected: RCpc load-acquire (LDAPR) [ 0.180341][ T1] CPU features: detected: LSE atomic instructions [ 0.180350][ T1] CPU features: detected: Privileged Access Never [ 0.180364][ T1] CPU features: detected: Speculative Store Bypassing Safe (SSBS) [ 0.180509][ T1] CPU: All CPU(s) started at EL1 [ 0.180529][ T1] alternatives: applying system-wide alternatives [ 0.188218][ T1] devtmpfs: initialized [ 0.195303][ T14] Callback from call_rcu_tasks_trace() invoked. [ 0.215065][ T1] Running RCU synchronous self tests [ 0.215131][ T1] Running RCU synchronous self tests [ 0.215435][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.215472][ T1] futex hash table entries: 512 (order: 4, 65536 bytes, linear) [ 0.229367][ T1] pinctrl core: initialized pinctrl subsystem [ 0.237667][ T1] SMBIOS 3.4.0 present. [ 0.237709][ T1] DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 0.241826][ T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.244851][ T1] DMA: preallocated 1024 KiB GFP_KERNEL pool for atomic allocations [ 0.245283][ T1] DMA: preallocated 1024 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations [ 0.247047][ T1] DMA: preallocated 1024 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations [ 0.247214][ T1] audit: initializing netlink subsys (disabled) [ 0.247695][ T27] audit: type=2000 audit(0.240:1): state=initialized audit_enabled=0 res=1 [ 0.255202][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 0.255217][ T1] thermal_sys: Registered thermal governor 'power_allocator' [ 0.255578][ T1] cpuidle: using governor menu [ 0.256290][ T1] NET: Registered PF_QIPCRTR protocol family [ 0.256921][ T1] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. [ 0.257133][ T1] ASID allocator initialised with 65536 entries [ 0.263082][ T1] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 [ 0.266390][ T1] Serial: AMBA PL011 UART driver [ 0.268570][ T1] Modules: 0 pages in range for non-PLT usage [ 0.268583][ T1] Modules: 448176 pages in range for PLT usage [ 0.270685][ T1] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages [ 0.270699][ T1] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page [ 0.270712][ T1] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages [ 0.270721][ T1] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page [ 0.270733][ T1] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages [ 0.270742][ T1] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page [ 0.270754][ T1] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages [ 0.270763][ T1] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page [ 0.445921][ T13] Callback from call_rcu_tasks() invoked. [ 0.446125][ T1] raid6: neonx8 gen() 4368 MB/s [ 0.616180][ T1] raid6: neonx4 gen() 4106 MB/s [ 0.786545][ T1] raid6: neonx2 gen() 3719 MB/s [ 0.956701][ T1] raid6: neonx1 gen() 2574 MB/s [ 1.127281][ T1] raid6: int64x8 gen() 2839 MB/s [ 1.297202][ T1] raid6: int64x4 gen() 2700 MB/s [ 1.467555][ T1] raid6: int64x2 gen() 2091 MB/s [ 1.637796][ T1] raid6: int64x1 gen() 1446 MB/s [ 1.637816][ T1] raid6: using algorithm neonx8 gen() 4368 MB/s [ 1.808040][ T1] raid6: .... xor() 2528 MB/s, rmw enabled [ 1.808060][ T1] raid6: using neon recovery algorithm [ 1.809922][ T1] ACPI: Added _OSI(Module Device) [ 1.809936][ T1] ACPI: Added _OSI(Processor Device) [ 1.809948][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 1.809959][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 1.823025][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 1.836261][ T1] ACPI: Interpreter enabled [ 1.836272][ T1] ACPI: Using GIC for interrupt routing [ 1.836449][ T1] ACPI: MCFG table detected, 1 entries [ 1.859852][ T1] ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA [ 1.859914][ T1] printk: console [ttyAMA0] enabled [ 2.103274][ T1] ARMH0011:01: ttyAMA1 at MMIO 0x9001000 (irq = 13, base_baud = 0) is a SBSA [ 2.109381][ T1] ARMH0011:02: ttyAMA2 at MMIO 0x9002000 (irq = 14, base_baud = 0) is a SBSA [ 2.115246][ T1] ARMH0011:03: ttyAMA3 at MMIO 0x9003000 (irq = 15, base_baud = 0) is a SBSA [ 2.122956][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) [ 2.124385][ T1] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] [ 2.127391][ T1] acpi PNP0A08:00: _OSC: platform does not support [LTR] [ 2.131084][ T1] acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] [ 2.134681][ T1] acpi PNP0A08:00: ECAM area [mem 0x3f000000-0x3fffffff] reserved by PNP0C02:00 [ 2.139438][ T1] acpi PNP0A08:00: ECAM at [mem 0x3f000000-0x3fffffff] for [bus 00-0f] [ 2.141271][ T1] ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] [ 2.144044][ T1] PCI host bridge to bus 0000:00 [ 2.144907][ T1] pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] [ 2.146330][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] [ 2.147629][ T1] pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] [ 2.149186][ T1] pci_bus 0000:00: root bus resource [bus 00-0f] [ 2.151042][ T1] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 2.154945][ T1] pci 0000:00:00.0: reg 0x10: [mem 0x10203000-0x10203fff] [ 2.157270][ T1] pci 0000:00:00.0: reg 0x14: [mem 0x10202000-0x1020203f] [ 2.159708][ T1] pci 0000:00:00.0: reg 0x18: [mem 0x10100000-0x101fffff] [ 2.162189][ T1] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 2.167024][ T1] pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] [ 2.170434][ T1] pci 0000:00:01.0: reg 0x14: [mem 0x10201000-0x1020103f] [ 2.179411][ T1] pci 0000:00:02.0: [1ae0:001f] type 00 class 0x010802 [ 2.187632][ T1] pci 0000:00:02.0: reg 0x10: [mem 0x10000000-0x10003fff 64bit] [ 2.193518][ T1] pci 0000:00:02.0: reg 0x20: [mem 0x10200000-0x1020003f] [ 2.198406][ T1] pci 0000:00:00.0: BAR 2: assigned [mem 0x10000000-0x100fffff] [ 2.200323][ T1] pci 0000:00:02.0: BAR 0: assigned [mem 0x8000000000-0x8000003fff 64bit] [ 2.204150][ T1] pci 0000:00:00.0: BAR 0: assigned [mem 0x10100000-0x10100fff] [ 2.206039][ T1] pci 0000:00:00.0: BAR 1: assigned [mem 0x10101000-0x1010103f] [ 2.207894][ T1] pci 0000:00:01.0: BAR 1: assigned [mem 0x10101040-0x1010107f] [ 2.209842][ T1] pci 0000:00:02.0: BAR 4: assigned [mem 0x10101080-0x101010bf] [ 2.211867][ T1] pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] [ 2.213825][ T1] pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] [ 2.215145][ T1] pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] [ 2.216311][ T1] pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] [ 2.218468][ T1] ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 [ 2.219839][ T1] ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 [ 2.221195][ T1] ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 [ 2.222552][ T1] ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 [ 2.229749][ T1] iommu: Default domain type: Translated [ 2.230818][ T1] iommu: DMA domain TLB invalidation policy: strict mode [ 2.234013][ T1] SCSI subsystem initialized [ 2.243147][ T1] ACPI: bus type USB registered [ 2.244251][ T1] usbcore: registered new interface driver usbfs [ 2.245479][ T1] usbcore: registered new interface driver hub [ 2.246657][ T1] usbcore: registered new device driver usb [ 2.249623][ T1] mc: Linux media interface: v0.10 [ 2.250714][ T1] videodev: Linux video capture interface: v2.00 [ 2.254037][ T1] pps_core: LinuxPPS API ver. 1 registered [ 2.255052][ T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 2.256831][ T1] PTP clock support registered [ 2.260568][ T1] EDAC MC: Ver: 3.0.0 [ 2.262977][ T1] scmi_core: SCMI protocol bus registered [ 2.265133][ T1] efivars: Registered efivars operations [ 2.268646][ T1] FPGA manager framework [ 2.272372][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 2.283218][ T1] Bluetooth: Core ver 2.22 [ 2.285867][ T1] NET: Registered PF_BLUETOOTH protocol family [ 2.286945][ T1] Bluetooth: HCI device and connection manager initialized [ 2.288198][ T1] Bluetooth: HCI socket layer initialized [ 2.289166][ T1] Bluetooth: L2CAP socket layer initialized [ 2.290220][ T1] Bluetooth: SCO socket layer initialized [ 2.291276][ T1] NET: Registered PF_ATMPVC protocol family [ 2.292306][ T1] NET: Registered PF_ATMSVC protocol family [ 2.295311][ T1] NetLabel: Initializing [ 2.296025][ T1] NetLabel: domain hash size = 128 [ 2.296924][ T1] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 2.298279][ T1] NetLabel: unlabeled traffic allowed by default [ 2.300533][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 2.303382][ T1] NET: Registered PF_NFC protocol family [ 2.305019][ T1] vgaarb: loaded [ 2.307537][ T1] clocksource: Switched to clocksource arch_sys_counter [ 2.310421][ T1] VFS: Disk quotas dquot_6.6.0 [ 2.311550][ T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.313330][ T1] FS-Cache: Loaded [ 2.314786][ T1] CacheFiles: Loaded [ 2.315896][ T1] TOMOYO: 2.6.0 [ 2.316505][ T1] Mandatory Access Control activated. [ 2.317901][ T1] pnp: PnP ACPI init [ 2.319807][ T1] system 00:00: [mem 0x3f000000-0x3fffffff window] could not be reserved [ 2.321825][ T1] pnp: PnP ACPI: found 1 devices [ 2.349667][ T1] NET: Registered PF_INET protocol family [ 2.351128][ T1] IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) [ 2.358624][ T1] tcp_listen_portaddr_hash hash table entries: 4096 (order: 6, 294912 bytes, linear) [ 2.360482][ T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 2.362023][ T1] TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 2.369193][ T1] TCP bind hash table entries: 65536 (order: 11, 9437184 bytes, vmalloc) [ 2.375513][ T1] TCP: Hash tables configured (established 65536 bind 65536) [ 2.377769][ T1] MPTCP token hash table entries: 8192 (order: 7, 720896 bytes, linear) [ 2.380068][ T1] UDP hash table entries: 4096 (order: 7, 655360 bytes, linear) [ 2.382185][ T1] UDP-Lite hash table entries: 4096 (order: 7, 655360 bytes, linear) [ 2.384311][ T1] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 2.386784][ T1] RPC: Registered named UNIX socket transport module. [ 2.388041][ T1] RPC: Registered udp transport module. [ 2.389011][ T1] RPC: Registered tcp transport module. [ 2.389972][ T1] RPC: Registered tcp-with-tls transport module. [ 2.391035][ T1] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 2.394157][ T1] NET: Registered PF_XDP protocol family [ 2.395258][ T1] PCI: CLS 0 bytes, default 64 [ 2.397731][ T1] ACPI: bus type thunderbolt registered [ 2.400382][ T57] Unable to handle kernel paging request at virtual address dfff800000000001 [ 2.401891][ T57] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2.403292][ T57] Mem abort info: [ 2.403888][ T57] ESR = 0x0000000096000005 [ 2.404676][ T57] EC = 0x25: DABT (current EL), IL = 32 bits [ 2.405740][ T57] SET = 0, FnV = 0 [ 2.406422][ T57] EA = 0, S1PTW = 0 [ 2.407077][ T57] FSC = 0x05: level 1 translation fault [ 2.407701][ T1] kvm [1]: HYP mode not available [ 2.408124][ T57] Data abort info: [ 2.409545][ T57] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 2.410414][ T58] Unable to handle kernel paging request at virtual address dfff800000000001 [ 2.410630][ T57] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2.412106][ T58] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2.413084][ T57] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 2.414515][ T58] Mem abort info: [ 2.415516][ T57] [dfff800000000001] address between user and kernel address ranges [ 2.416130][ T58] ESR = 0x0000000096000005 [ 2.417467][ T57] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 2.418249][ T58] EC = 0x25: DABT (current EL), IL = 32 bits [ 2.419411][ T57] Modules linked in: [ 2.420414][ T58] SET = 0, FnV = 0 [ 2.420424][ T58] EA = 0, S1PTW = 0 [ 2.421069][ T57] CPU: 0 PID: 57 Comm: kworker/u4:1 Not tainted 6.5.0-rc7-syzkaller-00063-g35e2132122ba-dirty #0 [ 2.421699][ T58] FSC = 0x05: level 1 translation fault [ 2.422363][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 2.424122][ T58] Data abort info: [ 2.425075][ T57] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2.426777][ T58] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 2.427398][ T57] pc : folio_memcg+0x2c/0x174 [ 2.428728][ T58] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 2.429766][ T57] lr : folio_lruvec_lock_irqsave+0x28/0x268 [ 2.430541][ T58] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 2.431526][ T57] sp : ffff800095917910 [ 2.432511][ T58] [dfff800000000001] address between user and kernel address ranges [ 2.433553][ T57] x29: ffff800095917910 x28: 0000000000000001 x27: dfff800000000000 [ 2.436954][ T57] x26: ffff700012b22f6c x25: 0000000000000000 x24: 1fffe0003683c938 [ 2.438334][ T57] x23: 0000000000000001 x22: dfff800000000000 x21: 1ffff00012b22f38 [ 2.439713][ T57] x20: 0000000000000008 x19: 0000000000000000 x18: ffff8000959177c0 [ 2.441149][ T57] x17: ffff800080a9bb38 x16: ffff80008a575470 x15: 0000000000000001 [ 2.442742][ T57] x14: 1ffff0001229f3a8 x13: dfff800000000000 x12: 0000000000000000 [ 2.444110][ T57] x11: 0000000000000001 x10: 0000000000000000 x9 : 0000000000000000 [ 2.445456][ T57] x8 : ffff0000c3ed0000 x7 : 0000000000000000 x6 : 0000000000000000 [ 2.446839][ T57] x5 : ffff800091553b50 x4 : 0000000000000002 x3 : ffff800080318494 [ 2.448239][ T57] x2 : 0000000000000001 x1 : ffff8000959179e0 x0 : 0000000000000000 [ 2.449642][ T57] Call trace: [ 2.450209][ T57] folio_memcg+0x2c/0x174 [ 2.450943][ T57] folio_lruvec_lock_irqsave+0x28/0x268 [ 2.451910][ T57] folio_batch_move_lru+0x280/0x4cc [ 2.452807][ T57] lru_add_drain_cpu+0xb8/0x4b0 [ 2.453651][ T57] lru_add_drain+0x8c/0x168 [ 2.454439][ T57] exit_mmap+0x1b0/0xb04 [ 2.455185][ T57] __mmput+0xec/0x390 [ 2.455880][ T57] mmput+0x70/0xac [ 2.456520][ T57] free_bprm+0x128/0x324 [ 2.457260][ T57] kernel_execve+0x328/0x7f0 [ 2.458050][ T57] call_usermodehelper_exec_async+0x21c/0x370 [ 2.459119][ T57] ret_from_fork+0x10/0x20 [ 2.459891][ T57] Code: 91002014 f2fbfff6 d343fe97 aa0003f3 (38766ae8) [ 2.461067][ T57] ---[ end trace 0000000000000000 ]--- [ 2.462033][ T57] Kernel panic - not syncing: Oops: Fatal exception [ 2.463191][ T57] SMP: stopping secondary CPUs [ 3.549009][ T57] SMP: failed to stop secondary CPUs 0-1 [ 3.550020][ T57] Kernel Offset: disabled [ 3.550774][ T57] CPU features: 0x00000010,38010021,88017203 [ 3.551841][ T57] Memory Limit: none [ 3.552511][ T57] Rebooting in 86400 seconds.. syzkaller build log: go env (err=) GO111MODULE="auto" GOARCH="amd64" GOBIN="" GOCACHE="/syzkaller/.cache/go-build" GOENV="/syzkaller/.config/go/env" GOEXE="" GOEXPERIMENT="" GOFLAGS="" GOHOSTARCH="amd64" GOHOSTOS="linux" GOINSECURE="" GOMODCACHE="/syzkaller/jobs-2/linux/gopath/pkg/mod" GONOPROXY="" GONOSUMDB="" GOOS="linux" GOPATH="/syzkaller/jobs-2/linux/gopath" GOPRIVATE="" GOPROXY="https://proxy.golang.org,direct" GOROOT="/usr/local/go" GOSUMDB="sum.golang.org" GOTMPDIR="" GOTOOLDIR="/usr/local/go/pkg/tool/linux_amd64" GOVCS="" GOVERSION="go1.20.1" GCCGO="gccgo" GOAMD64="v1" AR="ar" CC="gcc" CXX="g++" CGO_ENABLED="1" GOMOD="/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod" GOWORK="" CGO_CFLAGS="-O2 -g" CGO_CPPFLAGS="" CGO_CXXFLAGS="-O2 -g" CGO_FFLAGS="-O2 -g" CGO_LDFLAGS="-O2 -g" PKG_CONFIG="pkg-config" GOGCCFLAGS="-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build3088422762=/tmp/go-build -gno-record-gcc-switches" git status (err=) HEAD detached at b81ca3f66 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:32: run command via tools/syz-env for best compatibility, see: Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=b81ca3f66f8d2d8b397c3c1dc5f14e77c2936b1e -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230822-122036'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=b81ca3f66f8d2d8b397c3c1dc5f14e77c2936b1e -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230822-122036'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=arm64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=b81ca3f66f8d2d8b397c3c1dc5f14e77c2936b1e -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230822-122036'" "-tags=syz_target syz_os_linux syz_arch_arm64 " -o ./bin/linux_arm64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_arm64 aarch64-linux-gnu-gcc -o ./bin/linux_arm64/syz-executor executor/executor.cc \ -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_arm64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"b81ca3f66f8d2d8b397c3c1dc5f14e77c2936b1e\"