From: syzbot <syzbot+2e3bf0bd49acd9b21d4b@syzkaller.appspotmail.com>
To: axboe@kernel.dk, linux-block@vger.kernel.org,
linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [block?] BUG: unable to handle kernel paging request in blk_mq_complete_request_remote
Date: Wed, 07 Oct 2026 04:18:45 -0700 [thread overview]
Message-ID: <6ac62a95.d03902a3.74d6f.0002.GAE@google.com> (raw)
In-Reply-To: <6a900c70.50659fcc.60cd.0013.GAE@google.com>
syzbot has found a reproducer for the following issue on:
HEAD commit: 71c3e5409eef Merge remote-tracking branch 'will/for-next/p..
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
console output: https://syzkaller.appspot.com/x/log.txt?x=13c9400d580000
kernel config: https://syzkaller.appspot.com/x/.config?x=c7205f05c11fb4dd
dashboard link: https://syzkaller.appspot.com/bug?extid=2e3bf0bd49acd9b21d4b
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=17c9400d580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14fa21c9580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/20ff6159ce99/disk-71c3e540.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/1d6172672705/vmlinux-71c3e540.xz
kernel image: https://storage.googleapis.com/syzbot-assets/923d5e083e1b/Image-71c3e540.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2e3bf0bd49acd9b21d4b@syzkaller.appspotmail.com
Unable to handle kernel paging request at virtual address dfff800000000031
KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f]
Mem abort info:
ESR = 0x0000000096000005
EC = 0x25: DABT (current EL), IL = 32 bits
SET = 0, FnV = 0
EA = 0, S1PTW = 0
FSC = 0x05: level 1 translation fault
Data abort info:
ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
CM = 0, WnR = 0, TnD = 0, TagAccess = 0
GCS = 0, Overlay = 0, DirtyBit = 0
[dfff800000000031] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1] SMP
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Not tainted syzkaller #0 PREEMPT
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310
lr : blk_mq_complete_request_remote+0x88/0x858 block/blk-mq.c:1302
sp : ffff80008eac7ba0
x29: ffff80008eac7c30 x28: ffff80008eac7ba0 x27: 1fffe000190b201c
x26: 0000000000000001 x25: ffff0000c85900ee x24: dfff800000000000
x23: ffff700011d58f74 x22: 1fffe000190c0f24 x21: ffff0000c8607924
x20: 000000000000018e x19: ffff0000c8607800 x18: ffff800125472000
x17: ffff800125472000 x16: ffff80008eac0000 x15: 0000000000000000
x14: 00000000001afe2f x13: 0000000000000005 x12: 0000000000000000
x11: ffff80008eac7d98 x10: ffff8000883f0335 x9 : 1fffe000190c0f02
x8 : 0000000000000031 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000827e349c
x2 : 0000000000000000 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
Code: 97d041fa f9400288 91063914 d343fe88 (38f86908)
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D syzkaller #0 PREEMPT
Tainted: [D]=DIE
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000881 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 00000000000008e3 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000945 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 00000000000009a7 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000a09 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000a6b x13: 0000000000000a6b x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000acd x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000b2f x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000b91 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
Calling EFI runtime from hardirq context
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000bf3 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000001 x10: 0000000001000005 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000001 x6 : ffff800080482944
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: ffff700011153ff6 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000000 x6 : ffff800086845b5c
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] (P)
_raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:221 (P)
spin_unlock_irqrestore include/linux/spinlock.h:425 [inline]
__uart_port_unlock_irqrestore include/linux/serial_core.h:622 [inline]
pl011_console_device_unlock+0x94/0xcc drivers/tty/serial/amba-pl011.c:2721
nbcon_emit_one+0x160/0x1e4 kernel/printk/nbcon.c:1165
nbcon_kthread_func+0x56c/0x6c0 kernel/printk/nbcon.c:1271
kthread+0x304/0x3d4 kernel/kthread.c:436
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:854
irq event stamp: 19610
hardirqs last enabled at (19609): [<ffff80008688fdec>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
hardirqs last enabled at (19609): [<ffff80008688fdec>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221
hardirqs last disabled at (19610): [<ffff80008686ba58>] __el1_irq arch/arm64/kernel/entry-common.c:565 [inline]
hardirqs last disabled at (19610): [<ffff80008686ba58>] el1_interrupt+0x28/0x60 arch/arm64/kernel/entry-common.c:581
softirqs last enabled at (19568): [<ffff80008030a6dc>] softirq_handle_end kernel/softirq.c:491 [inline]
softirqs last enabled at (19568): [<ffff80008030a6dc>] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673
softirqs last disabled at (19425): [<ffff8000800203f0>] __do_softirq+0x14/0x20 kernel/softirq.c:679
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: arch/arm64/kernel/traps.c:414 at force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414, CPU#0: pr/ttyAMA-1/41
Modules linked in:
CPU: 0 UID: 0 PID: 41 Comm: pr/ttyAMA-1 Tainted: G D W syzkaller #0 PREEMPT
Tainted: [D]=DIE, [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 034000c5 (nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
lr : force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414
sp : ffff80008eac71c0
x29: ffff80008eac71c0 x28: ffff80008eac74c0 x27: dfff800000000000
x26: 0000000000000000 x25: ffff80008efe0000 x24: dfff800000000000
x23: 0000000000000005 x22: 0000000000000009 x21: 0000000000000080
x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: ffff700011153ff6 x9 : 0000000001000004
x8 : ffff0000c24b9d80 x7 : 0000000000000000 x6 : ffff800086845b5c
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000801524f4
x2 : 0000000000000005 x1 : ffff0000c24b9d80 x0 : 0000000000000000
Call trace:
force_signal_inject+0x150/0x168 arch/arm64/kernel/traps.c:414 (P)
__efi_fpsimd_begin+0xd8/0x21c arch/arm64/kernel/fpsimd.c:2010
arch_efi_call_virt_setup+0xb4/0x254 arch/arm64/kernel/efi.c:187
virt_efi_set_variable_nb+0x9c/0x110 drivers/firmware/efi/runtime-wrappers.c:492
efivar_set_variable_locked+0x1cc/0x208 drivers/firmware/efi/vars.c:231
efi_pstore_write+0x2d4/0x418 drivers/firmware/efi/efi-pstore.c:227
pstore_dump+0x57c/0x8e8 fs/pstore/platform.c:355
kmsg_dump_desc+0x1f4/0x328 kernel/printk/printk.c:4880
kmsg_dump include/linux/kmsg_dump.h:123 [inline]
oops_exit+0x34/0x40 kernel/panic.c:1066
die+0xb8/0x1d4 arch/arm64/kernel/traps.c:224
die_kernel_fault+0x6c/0x80 arch/arm64/mm/fault.c:358
__do_kernel_fault+0x55c/0x590 arch/arm64/mm/fault.c:458
do_bad_area+0x7c/0x148 arch/arm64/mm/fault.c:533
do_translation_fault+0xdc/0x114 arch/arm64/mm/fault.c:851
do_mem_abort+0x70/0x194 arch/arm64/mm/fault.c:1012
el1_abort+0x50/0x74 arch/arm64/kernel/entry-common.c:380
el1h_64_sync_handler+0xdc/0x130 arch/arm64/kernel/entry-common.c:507
el1h_64_sync+0x78/0x7c arch/arm64/kernel/entry.S:601
blk_mq_complete_request_remote+0xc4/0x858 block/blk-mq.c:1310 (P)
nvme_try_complete_req drivers/nvme/host/nvme.h:839 [inline]
nvme_handle_cqe drivers/nvme/host/pci.c:1601 [inline]
nvme_poll_cq+0x544/0xfd8 drivers/nvme/host/pci.c:1632
nvme_irq+0x9c/0x120 drivers/nvme/host/pci.c:1646
__handle_irq_event_percpu+0x200/0x8ac kernel/irq/handle.c:209
handle_irq_event_percpu+0x2c/0xd8 kernel/irq/handle.c:246
handle_irq_event+0x98/0x188 kernel/irq/handle.c:263
handle_fasteoi_irq+0x328/0x864 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq_desc kernel/irq/irqdesc.c:679 [inline]
generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:735
__gic_handle_irq drivers/irqchip/irq-gic-v3.c:825 [inline]
__gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:873 [inline]
gic_handle_irq+0x6c/0x180 drivers/irqchip/irq-gic-v3.c:917
call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:901
do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:216
__el1_irq arch/arm64/kernel/entry-common.c:568 [inline]
el1_interrupt+0x3c/0x60 arch/arm64/kernel/entry-common.c:581
el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:586
el1h_64_irq+0x78/0x7c arch/arm64/kernel/entry.S:602
__daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] (P)
arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] (P)
__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline]
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
prev parent reply other threads:[~2026-10-07 11:18 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-27 10:07 [syzbot] [block?] BUG: unable to handle kernel paging request in blk_mq_complete_request_remote syzbot
2026-10-07 11:18 ` syzbot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6ac62a95.d03902a3.74d6f.0002.GAE@google.com \
--to=syzbot+2e3bf0bd49acd9b21d4b@syzkaller.appspotmail.com \
--cc=axboe@kernel.dk \
--cc=linux-block@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.