Unable to handle kernel paging request at virtual address fbff70000000001a KASAN: maybe wild-memory-access in range [0xdfff8000000000d0-0xdfff8000000000d7] Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [fbff70000000001a] address between user and kernel address ranges Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 6767 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-00089-g8de1e7afcc1c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : pid_nr include/linux/pid.h:186 [inline] pc : dump_holder fs/gfs2/glock.c:2263 [inline] pc : gfs2_dump_glock+0xb50/0x1560 fs/gfs2/glock.c:2375 lr : pid_nr include/linux/pid.h:186 [inline] lr : dump_holder fs/gfs2/glock.c:2263 [inline] lr : gfs2_dump_glock+0xb48/0x1560 fs/gfs2/glock.c:2375 sp : ffff8000975d6b00 x29: ffff8000975d6e00 x28: ffff8000975d6be0 x27: ffff8000969b7570 x26: 0000000000000040 x25: ffff8000969b7580 x24: ffff8000969b7560 x23: dfff800000000000 x22: dfff8000000000d0 x21: ffff8000975d6c00 x20: dfff800000000000 x19: 1ffff00012d36eb0 x18: ffff0001b41b3b68 x17: ffff800125f05000 x16: ffff80008a71b23c x15: 0000000000000004 x14: ffff80008e3405e0 x13: dfff800000000000 x12: 000000002488130e x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : 1bfff0000000001a x7 : ffff80008242c5c8 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: pid_nr include/linux/pid.h:186 [inline] dump_holder fs/gfs2/glock.c:2263 [inline] gfs2_dump_glock+0xb50/0x1560 fs/gfs2/glock.c:2375 gfs2_consist_inode_i+0xe8/0x10c fs/gfs2/util.c:456 gfs2_dirent_scan+0x458/0x584 fs/gfs2/dir.c:602 gfs2_dirent_search+0x28c/0x790 fs/gfs2/dir.c:850 gfs2_dir_search+0xb8/0x280 fs/gfs2/dir.c:1650 gfs2_lookupi+0x3a4/0x500 fs/gfs2/inode.c:338 __gfs2_lookup+0xb0/0x270 fs/gfs2/inode.c:894 gfs2_lookup+0x2c/0x3c fs/gfs2/inode.c:928 __lookup_slow+0x250/0x374 fs/namei.c:1694 lookup_slow+0x60/0x84 fs/namei.c:1711 walk_component fs/namei.c:2002 [inline] link_path_walk+0x7c8/0xc5c fs/namei.c:2329 path_lookupat+0x90/0x3d0 fs/namei.c:2482 do_o_path+0xa8/0x214 fs/namei.c:3768 path_openat+0x21d0/0x27f8 fs/namei.c:3790 do_filp_open+0x1bc/0x3cc fs/namei.c:3824 do_sys_openat2+0x124/0x1b8 fs/open.c:1422 do_sys_open fs/open.c:1437 [inline] __do_sys_openat fs/open.c:1453 [inline] __se_sys_openat fs/open.c:1448 [inline] __arm64_sys_openat+0x1f0/0x240 fs/open.c:1448 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x54/0x158 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 Code: b4000114 9783d7aa 91034296 d343fec8 (38f76908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: b4000114 cbz x20, 0x20 4: 9783d7aa bl 0xfffffffffe0f5eac 8: 91034296 add x22, x20, #0xd0 c: d343fec8 lsr x8, x22, #3 * 10: 38f76908 ldrsb w8, [x8, x23] <-- trapping instruction