------------[ cut here ]------------
======================================================
WARNING: possible circular locking dependency detected
6.6.0-rc1-next-20230915-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.3/12530 is trying to acquire lock:
ffffffff8cb987d8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 kernel/locking/semaphore.c:139

but task is already holding lock:
ffff88813fffacd8 (&zone->lock){-.-.}-{2:2}, at: free_pcppages_bulk+0x6a/0x610 mm/page_alloc.c:1202

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #5 (&zone->lock){-.-.}-{2:2}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162
       rmqueue_bulk mm/page_alloc.c:2203 [inline]
       __rmqueue_pcplist+0xcd3/0x1430 mm/page_alloc.c:2752
       rmqueue_pcplist mm/page_alloc.c:2794 [inline]
       rmqueue mm/page_alloc.c:2831 [inline]
       get_page_from_freelist+0x31c/0x2d10 mm/page_alloc.c:3221
       __alloc_pages+0x1d0/0x4a0 mm/page_alloc.c:4480
       alloc_pages+0x1a9/0x270 mm/mempolicy.c:2298
       alloc_slab_page mm/slub.c:1870 [inline]
       allocate_slab+0x251/0x380 mm/slub.c:2017
       new_slab mm/slub.c:2070 [inline]
       ___slab_alloc+0x8c7/0x1580 mm/slub.c:3223
       __slab_alloc.constprop.0+0x56/0xa0 mm/slub.c:3322
       __slab_alloc_node mm/slub.c:3375 [inline]
       slab_alloc_node mm/slub.c:3468 [inline]
       slab_alloc mm/slub.c:3486 [inline]
       __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
       kmem_cache_alloc+0x38c/0x3b0 mm/slub.c:3502
       kmem_cache_zalloc include/linux/slab.h:710 [inline]
       fill_pool+0x271/0x5d0 lib/debugobjects.c:168
       debug_objects_fill_pool lib/debugobjects.c:615 [inline]
       debug_object_activate+0x149/0x490 lib/debugobjects.c:713
       debug_hrtimer_activate kernel/time/hrtimer.c:422 [inline]
       debug_activate kernel/time/hrtimer.c:477 [inline]
       enqueue_hrtimer+0x23/0x310 kernel/time/hrtimer.c:1087
       __run_hrtimer kernel/time/hrtimer.c:1705 [inline]
       __hrtimer_run_queues+0xa0a/0xc10 kernel/time/hrtimer.c:1752
       hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1814
       local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1063 [inline]
       __sysvec_apic_timer_interrupt+0x105/0x3f0 arch/x86/kernel/apic/apic.c:1080
       sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1074
       asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
       __sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:527
       orc_find arch/x86/kernel/unwind_orc.c:202 [inline]
       unwind_next_frame+0x1ab/0x2390 arch/x86/kernel/unwind_orc.c:494
       __unwind_start+0x5a4/0x880 arch/x86/kernel/unwind_orc.c:760
       unwind_start arch/x86/include/asm/unwind.h:64 [inline]
       arch_stack_walk+0xaf/0x170 arch/x86/kernel/stacktrace.c:24
       stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122
       kasan_save_stack+0x33/0x50 mm/kasan/common.c:46
       kasan_set_track+0x25/0x30 mm/kasan/common.c:53
       __kasan_slab_alloc+0x81/0x90 mm/kasan/common.c:329
       kasan_slab_alloc include/linux/kasan.h:188 [inline]
       slab_post_alloc_hook mm/slab.h:762 [inline]
       slab_alloc_node mm/slub.c:3478 [inline]
       slab_alloc mm/slub.c:3486 [inline]
       __kmem_cache_alloc_lru mm/slub.c:3493 [inline]
       kmem_cache_alloc+0x16c/0x3b0 mm/slub.c:3502
       kmem_cache_zalloc include/linux/slab.h:710 [inline]
       fill_pool+0x271/0x5d0 lib/debugobjects.c:168
       debug_objects_fill_pool lib/debugobjects.c:615 [inline]
       __debug_object_init+0x44/0x2b0 lib/debugobjects.c:628
       __init_work+0x4c/0x60 kernel/workqueue.c:585
       call_usermodehelper_setup+0xb5/0x340 kernel/umh.c:367
       kobject_uevent_env+0xf4e/0x1800 lib/kobject_uevent.c:614
       device_add+0x1113/0x1aa0 drivers/base/core.c:3605
       device_create_groups_vargs+0x1f4/0x270 drivers/base/core.c:4311
       device_create_with_groups+0xf2/0x130 drivers/base/core.c:4391
       vty_init+0x9c/0x420 drivers/tty/vt/vt.c:3536
       tty_init+0x179/0x1c0 drivers/tty/tty_io.c:3638
       chr_dev_init+0xfb/0x160 drivers/char/mem.c:780
       do_one_initcall+0x117/0x630 init/main.c:1232
       do_initcall_level init/main.c:1294 [inline]
       do_initcalls init/main.c:1310 [inline]
       do_basic_setup init/main.c:1329 [inline]
       kernel_init_freeable+0x5c2/0x8f0 init/main.c:1547
       kernel_init+0x1c/0x2a0 init/main.c:1437
       ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
       ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304

-> #4 (hrtimer_bases.lock){-.-.}-{2:2}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162
       lock_hrtimer_base kernel/time/hrtimer.c:174 [inline]
       hrtimer_start_range_ns+0xe7/0xdb0 kernel/time/hrtimer.c:1299
       hrtimer_start_expires include/linux/hrtimer.h:432 [inline]
       do_start_rt_bandwidth kernel/sched/rt.c:116 [inline]
       start_rt_bandwidth kernel/sched/rt.c:127 [inline]
       inc_rt_group kernel/sched/rt.c:1241 [inline]
       inc_rt_tasks kernel/sched/rt.c:1285 [inline]
       __enqueue_rt_entity kernel/sched/rt.c:1461 [inline]
       enqueue_rt_entity kernel/sched/rt.c:1510 [inline]
       enqueue_task_rt+0xa78/0xf60 kernel/sched/rt.c:1545
       enqueue_task+0xad/0x340 kernel/sched/core.c:2096
       __sched_setscheduler.constprop.0+0x12b5/0x2a00 kernel/sched/core.c:7813
       _sched_setscheduler kernel/sched/core.c:7860 [inline]
       sched_setscheduler_nocheck kernel/sched/core.c:7907 [inline]
       sched_set_fifo+0xb1/0x110 kernel/sched/core.c:7931
       drm_vblank_worker_init+0x192/0x230 drivers/gpu/drm/drm_vblank_work.c:263
       drm_vblank_init+0x128/0x340 drivers/gpu/drm/drm_vblank.c:551
       vkms_create drivers/gpu/drm/vkms/vkms_drv.c:209 [inline]
       vkms_init+0x392/0x760 drivers/gpu/drm/vkms/vkms_drv.c:252
       do_one_initcall+0x117/0x630 init/main.c:1232
       do_initcall_level init/main.c:1294 [inline]
       do_initcalls init/main.c:1310 [inline]
       do_basic_setup init/main.c:1329 [inline]
       kernel_init_freeable+0x5c2/0x8f0 init/main.c:1547
       kernel_init+0x1c/0x2a0 init/main.c:1437
       ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
       ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304

-> #3 (&rt_b->rt_runtime_lock){-.-.}-{2:2}:
       __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
       _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154
       __enable_runtime kernel/sched/rt.c:876 [inline]
       rq_online_rt+0xb3/0x3b0 kernel/sched/rt.c:2485
       set_rq_online.part.0+0xf9/0x140 kernel/sched/core.c:9494
       set_rq_online kernel/sched/core.c:9486 [inline]
       sched_cpu_activate+0x20f/0x440 kernel/sched/core.c:9603
       cpuhp_invoke_callback+0x402/0xb80 kernel/cpu.c:195
       cpuhp_thread_fun+0x46d/0x6f0 kernel/cpu.c:1085
       smpboot_thread_fn+0x660/0xa00 kernel/smpboot.c:164
       kthread+0x33c/0x440 kernel/kthread.c:388
       ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
       ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304

-> #2 (&rq->__lock){-.-.}-{2:2}:
       _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378
       raw_spin_rq_lock_nested+0x29/0x130 kernel/sched/core.c:558
       raw_spin_rq_lock kernel/sched/sched.h:1372 [inline]
       rq_lock kernel/sched/sched.h:1686 [inline]
       task_fork_fair+0x70/0x240 kernel/sched/fair.c:12361
       sched_cgroup_fork+0x3cf/0x510 kernel/sched/core.c:4799
       copy_process+0x4580/0x74b0 kernel/fork.c:2604
       kernel_clone+0xfd/0x920 kernel/fork.c:2902
       user_mode_thread+0xb4/0xf0 kernel/fork.c:2980
       rest_init+0x27/0x2b0 init/main.c:691
       arch_call_rest_init+0x13/0x30 init/main.c:823
       start_kernel+0x39f/0x480 init/main.c:1068
       x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:556
       x86_64_start_kernel+0xb2/0xc0 arch/x86/kernel/head64.c:537
       secondary_startup_64_no_verify+0x166/0x16b

-> #1 (&p->pi_lock){-.-.}-{2:2}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162
       class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:518 [inline]
       try_to_wake_up+0xb0/0x15b0 kernel/sched/core.c:4213
       up+0x79/0xb0 kernel/locking/semaphore.c:191
       __up_console_sem kernel/printk/printk.c:346 [inline]
       __console_unlock kernel/printk/printk.c:2718 [inline]
       console_unlock+0x1cf/0x260 kernel/printk/printk.c:3037
       do_con_write+0x16df/0x7f40 drivers/tty/vt/vt.c:2918
       con_write+0x23/0x40 drivers/tty/vt/vt.c:3245
       process_output_block drivers/tty/n_tty.c:579 [inline]
       n_tty_write+0x422/0x1130 drivers/tty/n_tty.c:2384
       iterate_tty_write drivers/tty/tty_io.c:1017 [inline]
       file_tty_write.constprop.0+0x519/0x9b0 drivers/tty/tty_io.c:1088
       call_write_iter include/linux/fs.h:1986 [inline]
       new_sync_write fs/read_write.c:491 [inline]
       vfs_write+0x650/0xe40 fs/read_write.c:584
       ksys_write+0x12f/0x250 fs/read_write.c:637
       do_syscall_x64 arch/x86/entry/common.c:51 [inline]
       do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:81
       entry_SYSCALL_64_after_hwframe+0x63/0xcd

-> #0 ((console_sem).lock){-.-.}-{2:2}:
       check_prev_add kernel/locking/lockdep.c:3134 [inline]
       check_prevs_add kernel/locking/lockdep.c:3253 [inline]
       validate_chain kernel/locking/lockdep.c:3868 [inline]
       __lock_acquire+0x2e3d/0x5de0 kernel/locking/lockdep.c:5136
       lock_acquire kernel/locking/lockdep.c:5753 [inline]
       lock_acquire+0x1ae/0x510 kernel/locking/lockdep.c:5718
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162
       down_trylock+0x12/0x70 kernel/locking/semaphore.c:139
       __down_trylock_console_sem+0x40/0x140 kernel/printk/printk.c:329
       console_trylock+0x73/0x130 kernel/printk/printk.c:2671
       console_trylock_spinning kernel/printk/printk.c:1927 [inline]
       vprintk_emit+0x162/0x5f0 kernel/printk/printk.c:2306
       vprintk+0x7b/0x90 kernel/printk/printk_safe.c:45
       _printk+0xc8/0x100 kernel/printk/printk.c:2332
       __warn_printk+0x158/0x350 kernel/panic.c:720
       del_page_from_free_list+0x36e/0x490 mm/page_alloc.c:699
       __free_one_page+0x3eb/0xa50 mm/page_alloc.c:830
       free_pcppages_bulk+0x2f3/0x610 mm/page_alloc.c:1233
       free_unref_page+0x69b/0xd70 mm/page_alloc.c:2483
       __unfreeze_partials+0x21d/0x240 mm/slub.c:2655
       qlink_free mm/kasan/quarantine.c:166 [inline]
       qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185
       kasan_quarantine_reduce+0x18e/0x1d0 mm/kasan/quarantine.c:292
       __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:306
       kasan_slab_alloc include/linux/kasan.h:188 [inline]
       slab_post_alloc_hook mm/slab.h:762 [inline]
       slab_alloc_node mm/slub.c:3478 [inline]
       __kmem_cache_alloc_node+0x195/0x340 mm/slub.c:3517
       __do_kmalloc_node mm/slab_common.c:1022 [inline]
       __kmalloc+0x4f/0x100 mm/slab_common.c:1036
       kmalloc include/linux/slab.h:603 [inline]
       tomoyo_realpath_from_path+0xb9/0x710 security/tomoyo/realpath.c:251
       tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
       tomoyo_path_number_perm+0x241/0x580 security/tomoyo/file.c:723
       security_file_ioctl+0x72/0xb0 security/security.c:2647
       __do_sys_ioctl fs/ioctl.c:865 [inline]
       __se_sys_ioctl fs/ioctl.c:857 [inline]
       __x64_sys_ioctl+0xbb/0x210 fs/ioctl.c:857
       do_syscall_x64 arch/x86/entry/common.c:51 [inline]
       do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:81
       entry_SYSCALL_64_after_hwframe+0x63/0xcd

other info that might help us debug this:

Chain exists of:
  (console_sem).lock --> hrtimer_bases.lock --> &zone->lock

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&zone->lock);
                               lock(hrtimer_bases.lock);
                               lock(&zone->lock);
  lock((console_sem).lock);

 *** DEADLOCK ***

4 locks held by syz-executor.3/12530:
 #0: ffffffff8d4472f0 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:116 [inline]
 #0: ffffffff8d4472f0 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:215 [inline]
 #0: ffffffff8d4472f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1108 [inline]
 #0: ffffffff8d4472f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x22e/0x580 security/tomoyo/file.c:722
 #1: ffffffff8cd3d430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:116 [inline]
 #1: ffffffff8cd3d430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:215 [inline]
 #1: ffffffff8cd3d430 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x81/0x1d0 mm/kasan/quarantine.c:265
 #2: ffff8880b99425d8 (&pcp->lock){+.+.}-{2:2}, at: spin_trylock include/linux/spinlock.h:361 [inline]
 #2: ffff8880b99425d8 (&pcp->lock){+.+.}-{2:2}, at: free_unref_page+0x35f/0xd70 mm/page_alloc.c:2481
 #3: ffff88813fffacd8 (&zone->lock){-.-.}-{2:2}, at: free_pcppages_bulk+0x6a/0x610 mm/page_alloc.c:1202

stack backtrace:
CPU: 1 PID: 12530 Comm: syz-executor.3 Not tainted 6.6.0-rc1-next-20230915-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
 check_noncircular+0x311/0x3f0 kernel/locking/lockdep.c:2187
 check_prev_add kernel/locking/lockdep.c:3134 [inline]
 check_prevs_add kernel/locking/lockdep.c:3253 [inline]
 validate_chain kernel/locking/lockdep.c:3868 [inline]
 __lock_acquire+0x2e3d/0x5de0 kernel/locking/lockdep.c:5136
 lock_acquire kernel/locking/lockdep.c:5753 [inline]
 lock_acquire+0x1ae/0x510 kernel/locking/lockdep.c:5718
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
 _raw_spin_lock_irqsave+0x3a/0x50 kernel/locking/spinlock.c:162
 down_trylock+0x12/0x70 kernel/locking/semaphore.c:139
 __down_trylock_console_sem+0x40/0x140 kernel/printk/printk.c:329
 console_trylock+0x73/0x130 kernel/printk/printk.c:2671
 console_trylock_spinning kernel/printk/printk.c:1927 [inline]
 vprintk_emit+0x162/0x5f0 kernel/printk/printk.c:2306
 vprintk+0x7b/0x90 kernel/printk/printk_safe.c:45
 _printk+0xc8/0x100 kernel/printk/printk.c:2332
 __warn_printk+0x158/0x350 kernel/panic.c:720
 del_page_from_free_list+0x36e/0x490 mm/page_alloc.c:699
 __free_one_page+0x3eb/0xa50 mm/page_alloc.c:830
 free_pcppages_bulk+0x2f3/0x610 mm/page_alloc.c:1233
 free_unref_page+0x69b/0xd70 mm/page_alloc.c:2483
 __unfreeze_partials+0x21d/0x240 mm/slub.c:2655
 qlink_free mm/kasan/quarantine.c:166 [inline]
 qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185
 kasan_quarantine_reduce+0x18e/0x1d0 mm/kasan/quarantine.c:292
 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:306
 kasan_slab_alloc include/linux/kasan.h:188 [inline]
 slab_post_alloc_hook mm/slab.h:762 [inline]
 slab_alloc_node mm/slub.c:3478 [inline]
 __kmem_cache_alloc_node+0x195/0x340 mm/slub.c:3517
 __do_kmalloc_node mm/slab_common.c:1022 [inline]
 __kmalloc+0x4f/0x100 mm/slab_common.c:1036
 kmalloc include/linux/slab.h:603 [inline]
 tomoyo_realpath_from_path+0xb9/0x710 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_number_perm+0x241/0x580 security/tomoyo/file.c:723
 security_file_ioctl+0x72/0xb0 security/security.c:2647
 __do_sys_ioctl fs/ioctl.c:865 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __x64_sys_ioctl+0xbb/0x210 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0efc87c84b
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007f0efd5d4fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0efc87c84b
RDX: 00007f0efd5d6070 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f0efd5d6070 R08: 0000000000000080 R09: 00007f0efd5d5068
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000008 R15: 00007f0efc8d0791
 </TASK>
page type is 0, passed migratetype is 1 (nr=512)
WARNING: CPU: 1 PID: 12530 at mm/page_alloc.c:699 del_page_from_free_list+0x36e/0x490 mm/page_alloc.c:699
Modules linked in:
CPU: 1 PID: 12530 Comm: syz-executor.3 Not tainted 6.6.0-rc1-next-20230915-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
RIP: 0010:del_page_from_free_list+0x36e/0x490 mm/page_alloc.c:699
Code: 89 ef be 07 00 00 00 e8 e0 f6 ff ff 44 89 e1 44 89 f2 48 c7 c7 20 b6 99 8a 48 89 c6 b8 01 00 00 00 d3 e0 89 c1 e8 d2 3b 7c ff <0f> 0b e9 d2 fc ff ff 48 c7 c6 80 b7 99 8a 48 89 df e8 9c 46 f4 ff
RSP: 0018:ffffc9000343f7f0 EFLAGS: 00010086
RAX: 0000000000000000 RBX: ffffea0000ed0000 RCX: ffffc90005b21000
RDX: 0000000000040000 RSI: ffffffff814e0396 RDI: 0000000000000001
RBP: 000000000003b400 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000009
R13: ffff88813fffa700 R14: 0000000000000001 R15: ffffea0000ed0000
FS:  00007f0efd5d76c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c000011350 CR3: 000000009f404000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __free_one_page+0x3eb/0xa50 mm/page_alloc.c:830
 free_pcppages_bulk+0x2f3/0x610 mm/page_alloc.c:1233
 free_unref_page+0x69b/0xd70 mm/page_alloc.c:2483
 __unfreeze_partials+0x21d/0x240 mm/slub.c:2655
 qlink_free mm/kasan/quarantine.c:166 [inline]
 qlist_free_all+0x6a/0x170 mm/kasan/quarantine.c:185
 kasan_quarantine_reduce+0x18e/0x1d0 mm/kasan/quarantine.c:292
 __kasan_slab_alloc+0x65/0x90 mm/kasan/common.c:306
 kasan_slab_alloc include/linux/kasan.h:188 [inline]
 slab_post_alloc_hook mm/slab.h:762 [inline]
 slab_alloc_node mm/slub.c:3478 [inline]
 __kmem_cache_alloc_node+0x195/0x340 mm/slub.c:3517
 __do_kmalloc_node mm/slab_common.c:1022 [inline]
 __kmalloc+0x4f/0x100 mm/slab_common.c:1036
 kmalloc include/linux/slab.h:603 [inline]
 tomoyo_realpath_from_path+0xb9/0x710 security/tomoyo/realpath.c:251
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_number_perm+0x241/0x580 security/tomoyo/file.c:723
 security_file_ioctl+0x72/0xb0 security/security.c:2647
 __do_sys_ioctl fs/ioctl.c:865 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __x64_sys_ioctl+0xbb/0x210 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x38/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f0efc87c84b
Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
RSP: 002b:00007f0efd5d4fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0efc87c84b
RDX: 00007f0efd5d6070 RSI: 0000000080085502 RDI: 0000000000000003
RBP: 00007f0efd5d6070 R08: 0000000000000080 R09: 00007f0efd5d5068
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
R13: 0000000800000000 R14: 0000000000000008 R15: 00007f0efc8d0791
 </TASK>