netdev - [syzbot] [nfc?] WARNING in __do_kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <000000000000a3003605fb110424@google.com>
Date: Sat, 06 May 2023 19:09:54 -0700
From: syzbot <syzbot+a373a8ad351dacac270c@...kaller.appspotmail.com>
To: davem@...emloft.net, edumazet@...gle.com, krzysztof.kozlowski@...aro.org, 
	kuba@...nel.org, linux-kernel@...r.kernel.org, linux-nfc@...ts.01.org, 
	netdev@...r.kernel.org, pabeni@...hat.com, syzkaller-bugs@...glegroups.com
Subject: [syzbot] [nfc?] WARNING in __do_kernel_fault (3)

Hello,

syzbot found the following issue on:

HEAD commit:    7df047b3f0aa Merge tag 'vfio-v6.4-rc1' of https://github.c..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=12c4d222280000
kernel config:  https://syzkaller.appspot.com/x/.config?x=771c565ea138992b
dashboard link: https://syzkaller.appspot.com/bug?extid=a373a8ad351dacac270c
compiler:       aarch64-linux-gnu-gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
userspace arch: arm64

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+a373a8ad351dacac270c@...kaller.appspotmail.com

------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 00003609183bf5b0
x14: 000000000000014b x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 00006d5cf25a0f34
x14: 00000000000001df x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000ba0 x12: 00000000000003e0
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000c15 x12: 0000000000000407
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffffef9cd3a8
x14: 0000000000000287 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000a8932093e75e
x14: 0000000000000226 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000a4b961bb5246
x14: 00000000000001f0 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b1f130240e68
x14: 000000000000007a x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000e5e x12: 00000000000004ca
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000ed3 x12: 00000000000004f1
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 105335 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000f4b x12: 0000000000000519
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000000fc0 x12: 0000000000000540
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000001035 x12: 0000000000000567
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000a538ce5d25da
x14: 00000000000002cd x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 000000000000111f x12: 00000000000005b5
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000001194 x12: 00000000000005dc
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 0000b0ae79ca6714
x14: 000000000000016f x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 000000000000127e x12: 000000000000062a
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b2b63376c440
x14: 000000000000000b x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b32e90bdb2fe
x14: 00000000000000f5 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
__do_kernel_fault: 132479 callbacks suppressed
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 0 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 0 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 00000000000013e0 x12: 00000000000006a0
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : ffff00007f9b7c88 x4 : 0000000000000000 x3 : ffff800075617000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 00000000fffffffb
x17: 6564207373657264 x16: 6461206c61757472 x15: 697620746120746c
x14: ffff80000a3eccf8 x13: 0000000000001455 x12: 00000000000006c7
x11: 2073736572646461 x10: ffff80000a49ccf8 x9 : 00000000ffffe000
x8 : ffff80000a3eccf8 x7 : ffff80000a49ccf8 x6 : 0000000000000000
x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b295e87cb626
x14: 0000000000000283 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b4e3fcb2fda4
x14: 0000000000000254 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b541ee160f64
x14: 000000000000007a x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000000 x1 : 0000000000000000 x0 : fbff0000236abf00
Call trace:
 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
 do_bad_area arch/arm64/mm/fault.c:479 [inline]
 do_translation_fault+0x50/0xb8 arch/arm64/mm/fault.c:733
 do_mem_abort+0x44/0x94 arch/arm64/mm/fault.c:867
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:367
 el1h_64_sync_handler+0xd8/0xe4 arch/arm64/kernel/entry-common.c:427
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:586
 nfc_llcp_find_local net/nfc/llcp_core.c:286 [inline]
 nfc_llcp_unregister_device+0x34/0x10c net/nfc/llcp_core.c:1611
 nfc_unregister_device+0x74/0xb0 net/nfc/core.c:1179
 nci_unregister_device+0xb8/0xe8 net/nfc/nci/core.c:1303
 virtual_ncidev_close+0x1c/0x40 drivers/nfc/virtual_ncidev.c:163
 __fput+0x78/0x258 fs/file_table.c:321
 ____fput+0x10/0x1c fs/file_table.c:349
 task_work_run+0x6c/0xc4 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x214/0x144c arch/arm64/kernel/signal.c:1304
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0xac/0xb0 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0xb8/0xbc arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
Ignoring spurious kernel translation fault at virtual address dead000000000110
WARNING: CPU: 1 PID: 6668 at arch/arm64/mm/fault.c:374 __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
Modules linked in:
CPU: 1 PID: 6668 Comm: syz-executor.0 Tainted: G        W          6.3.0-syzkaller-12570-g7df047b3f0aa #0
Hardware name: linux,dummy-virt (DT)
pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
lr : __do_kernel_fault+0x158/0x1c0 arch/arm64/mm/fault.c:374
sp : ffff80000aff39f0
x29: ffff80000aff39f0 x28: fbff0000236abf00 x27: 0000000000000000
x26: 0000000045585401 x25: fbff0000236acae0 x24: 0000000000000000
x23: 0000000080400009 x22: 0000000000000025 x21: dead000000000110
x20: ffff80000aff3ab0 x19: 0000000097c18004 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000b0ad84a4ea00
x14: 0000000000000215 x13: ffff800009fbaed8 x12: ffff80000a3bfef0
x11: 0000000000000001 x10: 5e80d0bfb87b43ed x9 : 5d8fca8ff35a965c
x8 : fbff0000236ace88 x7 : 0000000000000004 x6 : 0000000000000190
x5 : 00000000000f0510 x4 : 0000000000f0000f x3 : 000000000000ffff
x2 : 0000000000000

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@...glegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the bug is already fixed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to change bug's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the bug is a duplicate of another bug, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup