Unable to handle kernel paging request at virtual address 001f81a94240013b Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 [001f81a94240013b] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 5997 Comm: syz.5.371 Not tainted 6.1.131-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : pid_nr include/linux/pid.h:185 [inline] pc : dump_holder fs/gfs2/glock.c:2330 [inline] pc : gfs2_dump_glock+0xaf8/0x1558 fs/gfs2/glock.c:2440 lr : pid_nr include/linux/pid.h:185 [inline] lr : dump_holder fs/gfs2/glock.c:2330 [inline] lr : gfs2_dump_glock+0xaf0/0x1558 fs/gfs2/glock.c:2440 sp : ffff800021847480 x29: ffff800021847780 x28: 0000000000000040 x27: ffff800021467670 x26: ffff80000ab8505c x25: ffff800021847560 x24: ffff80000ab8503c x23: dfff800000000000 x22: 11000d4a120009da x21: ffff800021847580 x20: 11000d4a1200090a x19: 1ffff00001570a0b x18: ffff800021846bc0 x17: ffff800018c58000 x16: ffff800012327ebc x15: ffff800018738f80 x14: 1ffff00002b600b2 x13: dfff800000000000 x12: 0000000000080000 x11: 0000000000009d44 x10: ffff800034401000 x9 : ffff80000a41db50 x8 : 022001a94240013b x7 : ffff80000a42a9f0 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: pid_nr include/linux/pid.h:185 [inline] dump_holder fs/gfs2/glock.c:2330 [inline] gfs2_dump_glock+0xaf8/0x1558 fs/gfs2/glock.c:2440 gfs2_consist_inode_i+0xe8/0x10c fs/gfs2/util.c:467 gfs2_dirent_scan+0x458/0x584 fs/gfs2/dir.c:602 gfs2_dir_read+0x6b4/0x1624 fs/gfs2/dir.c:1599 gfs2_readdir+0x164/0x1c4 fs/gfs2/file.c:115 iterate_dir+0x1f4/0x4ec __do_sys_getdents64 fs/readdir.c:369 [inline] __se_sys_getdents64 fs/readdir.c:354 [inline] __arm64_sys_getdents64+0x1c4/0x4a0 fs/readdir.c:354 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: b4000114 97835c2c 91034296 d343fec8 (38f76908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: b4000114 cbz x20, 0x20 4: 97835c2c bl 0xfffffffffe0d70b4 8: 91034296 add x22, x20, #0xd0 c: d343fec8 lsr x8, x22, #3 * 10: 38f76908 ldrsb w8, [x8, x23] <-- trapping instruction