Unable to handle kernel paging request at virtual address 001f81a94240013b Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 [001f81a94240013b] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4554 Comm: syz.3.34 Not tainted 6.1.128-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : pid_nr include/linux/pid.h:185 [inline] pc : dump_holder fs/gfs2/glock.c:2330 [inline] pc : gfs2_dump_glock+0xaf8/0x1558 fs/gfs2/glock.c:2440 lr : pid_nr include/linux/pid.h:185 [inline] lr : dump_holder fs/gfs2/glock.c:2330 [inline] lr : gfs2_dump_glock+0xaf0/0x1558 fs/gfs2/glock.c:2440 sp : ffff8000219d7480 x29: ffff8000219d7780 x28: 0000000000000040 x27: ffff800021a37670 x26: ffff80000ab822c0 x25: ffff8000219d7560 x24: ffff80000ab822a0 x23: dfff800000000000 x22: 11000d4a120009da x21: ffff8000219d7580 x20: 11000d4a1200090a x19: 1ffff00001570458 x18: 1fffe0003679cb76 x17: ffff800015aed000 x16: ffff80001231f9fc x15: ffff0001b3ce5bbc x14: 1ffff00002b5e0b2 x13: dfff800000000000 x12: 0000000000080000 x11: 000000000006ed7c x10: ffff8000266da000 x9 : ffff80000a41a1f4 x8 : 022001a94240013b x7 : ffff80000a427094 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: pid_nr include/linux/pid.h:185 [inline] dump_holder fs/gfs2/glock.c:2330 [inline] gfs2_dump_glock+0xaf8/0x1558 fs/gfs2/glock.c:2440 gfs2_consist_inode_i+0xe8/0x10c fs/gfs2/util.c:467 gfs2_dirent_scan+0x458/0x584 fs/gfs2/dir.c:602 gfs2_dir_read+0x6b4/0x1624 fs/gfs2/dir.c:1599 gfs2_readdir+0x164/0x1c4 fs/gfs2/file.c:115 iterate_dir+0x1f4/0x4ec __do_sys_getdents64 fs/readdir.c:369 [inline] __se_sys_getdents64 fs/readdir.c:354 [inline] __arm64_sys_getdents64+0x1c4/0x4a0 fs/readdir.c:354 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: b4000114 97836853 91034296 d343fec8 (38f76908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: b4000114 cbz x20, 0x20 4: 97836853 bl 0xfffffffffe0da150 8: 91034296 add x22, x20, #0xd0 c: d343fec8 lsr x8, x22, #3 * 10: 38f76908 ldrsb w8, [x8, x23] <-- trapping instruction