[moderation] WARNING: [!((((unsigned long) (((struct page *)((kernel_map.page_offset - ((((((1UL) << NUM) / sizeof(pgd_t)) / NUM * ((

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 798246e5edfb riscv: acpi: Enable ARCH_HAS_ACPI_TABLE_UPGRADE
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git for-next
console output: https://syzkaller.appspot.com/x/log.txt?x=140c7c51580000
kernel config: https://syzkaller.appspot.com/x/.config?x=addb050452cc7229
dashboard link: https://syzkaller.appspot.com/bug?extid=07c2137dfe8b0d7a8507
compiler: riscv64-linux-gnu-gcc (Debian 14.2.0-19) 14.2.0, GNU ld (GNU Binutils for Debian) 2.44
userspace arch: riscv64

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/a741b348759c/non_bootable_disk-798246e5.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/19f3bf45cab7/vmlinux-798246e5.xz
kernel image: https://storage.googleapis.com/syzbot-assets/72d4754b7d1e/Image-798246e5.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+07c213...@syzkaller.appspotmail.com

[ 0.000000][ C0] WARNING: [!((((unsigned long) (((struct page *)((kernel_map.page_offset - ((((((1UL) << 12) / sizeof(pgd_t)) / 2 * ((1UL) << (pgtable_l5_enabled ? 48 : (pgtable_l4_enabled ? 39 : 30)))) / 2) >> 1)) - ((((1UL))) << (((pgtable_l5_enabled ? 57 : (pgtable_l4_enabled ? 48 : 39)) - 12 - 1 + (( __builtin_constant_p(sizeof(struct page)) ? ( ((sizeof(struct page)) == 0 || (sizeof(struct page)) == 1) ? 0 : ( __builtin_constant_p((sizeof(struct page)) - 1) ? (((sizeof(struct page)) - 1) < 2 ? 0 : 63 - __builtin_clzll((sizeof(struct page)) - 1)) : (sizeof((sizeof(struct page)) - 1) <= 4) ? __ilog2_u32((sizeof(struct page)) - 1) : __ilog2_u64((sizeof(struct page)) - 1) ) + 1) : __order_base_2(sizeof(struct page)) )))))) - vmemmap_start_pfn) + (0))) & ((typeof((unsigned long) (((struct page *)((kernel_map.page_offset - ((((((1UL) << 12) / sizeof(pgd_t)) / 2 * ((1UL) << (pgtable_l5_enabled ? 48 : (pgtable_l4_enabled ? 39 : 30)))) / 2) >> 1)) - ((((1UL))) << (((pgtable_l5_enabled ? 57 : (pgtable_l4_enabled ? 48 : 39)) - 1

---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup