==================================================================
BUG: KASAN: invalid-access in copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26
Read at addr f0ff0000151d0000 by task syz-executor.1/2729
Pointer tag: [f0], memory tag: [fb]

CPU: 0 PID: 2729 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-00428-g9de1f9c8ca51 #0
Hardware name: linux,dummy-virt (DT)
Call trace:
 dump_backtrace.part.0+0xcc/0xe0 arch/arm64/kernel/stacktrace.c:249
 dump_backtrace arch/arm64/kernel/stacktrace.c:255 [inline]
 show_stack+0x18/0x5c arch/arm64/kernel/stacktrace.c:256
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x68/0x84 lib/dump_stack.c:106
 print_address_description mm/kasan/report.c:313 [inline]
 print_report+0xfc/0x5f0 mm/kasan/report.c:429
 kasan_report+0x8c/0xb0 mm/kasan/report.c:491
 __do_kernel_fault+0x104/0x1c0 arch/arm64/mm/fault.c:319
 do_bad_area arch/arm64/mm/fault.c:469 [inline]
 do_tag_check_fault+0x78/0x90 arch/arm64/mm/fault.c:738
 do_mem_abort+0x48/0xa0 arch/arm64/mm/fault.c:814
 el1_abort+0x40/0x60 arch/arm64/kernel/entry-common.c:366
 el1h_64_sync_handler+0xb0/0xd0 arch/arm64/kernel/entry-common.c:417
 el1h_64_sync+0x64/0x68 arch/arm64/kernel/entry.S:576
 copy_page+0x10/0xd0 arch/arm64/lib/copy_page.S:26
 copy_user_highpage+0x18/0x4c arch/arm64/mm/copypage.c:34
 __wp_page_copy_user mm/memory.c:2848 [inline]
 wp_page_copy+0xa0/0x790 mm/memory.c:3109
 do_wp_page+0x150/0x6a4 mm/memory.c:3471
 handle_pte_fault mm/memory.c:4925 [inline]
 __handle_mm_fault+0x6c4/0xf84 mm/memory.c:5046
 handle_mm_fault+0xe8/0x25c mm/memory.c:5144
 __do_page_fault arch/arm64/mm/fault.c:502 [inline]
 do_page_fault+0x140/0x3b0 arch/arm64/mm/fault.c:602
 do_mem_abort+0x48/0xa0 arch/arm64/mm/fault.c:814
 el0_da+0x48/0xbc arch/arm64/kernel/entry-common.c:502
 el0t_64_sync_handler+0x134/0x1b0 arch/arm64/kernel/entry-common.c:645
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:581

The buggy address belongs to the physical page:
page:000000006a77be70 refcount:3 mapcount:2 mapping:0000000000000000 index:0xffffffffe pfn:0x551d0
memcg:fdff0000123dc000
anon flags: 0x1ffc3c00208001c(uptodate|dirty|lru|swapbacked|arch_2|node=0|zone=0|lastcpupid=0x7ff|kasantag=0xf)
raw: 01ffc3c00208001c fffffc000054ccc8 f3ff000005635000 fdff000006fcc1c1
raw: 0000000ffffffffe 0000000000000000 0000000300000001 fdff0000123dc000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff0000151cfe00: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0
 ffff0000151cff00: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0
>ffff0000151d0000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                   ^
 ffff0000151d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff0000151d0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================