------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:28! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 2971 Comm: systemd-udevd Not tainted 5.15.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__phys_addr+0xd3/0x140 arch/x86/mm/physaddr.c:28 Code: e3 44 89 e9 31 ff 48 d3 eb 48 89 de e8 c6 b9 40 00 48 85 db 75 0f e8 dc b3 40 00 4c 89 e0 5b 5d 41 5c 41 5d c3 e8 cd b3 40 00 <0f> 0b e8 c6 b3 40 00 48 c7 c0 10 50 6b 8b 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc90001477930 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0007070000000707 RCX: 0000000000000000 RDX: ffff88801fbbe340 RSI: ffffffff81348f03 RDI: 0000000000000003 RBP: 0007070080000707 R08: 0007070080000707 R09: 0000000000000001 R10: ffffffff81348e7e R11: 000000000000003f R12: 00077e8000000707 R13: dffffc0000000000 R14: ffffc900014779a0 R15: ffffea0000000000 FS: 00007fb699b618c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb649baca10 CR3: 0000000020196000 CR4: 00000000001506e0 Call Trace: virt_to_head_page include/linux/mm.h:900 [inline] qlink_to_cache mm/kasan/quarantine.c:120 [inline] qlist_free_all+0xb8/0x110 mm/kasan/quarantine.c:162 kasan_quarantine_reduce+0x180/0x200 mm/kasan/quarantine.c:272 __kasan_slab_alloc+0x92/0xa0 mm/kasan/common.c:444 kasan_slab_alloc include/linux/kasan.h:254 [inline] slab_post_alloc_hook mm/slab.h:519 [inline] slab_alloc mm/slab.c:3323 [inline] __do_kmalloc mm/slab.c:3700 [inline] __kmalloc+0x284/0x4d0 mm/slab.c:3711 kmalloc include/linux/slab.h:596 [inline] tomoyo_realpath_from_path+0xc3/0x620 security/tomoyo/realpath.c:254 tomoyo_get_realpath security/tomoyo/file.c:151 [inline] tomoyo_path_perm+0x21b/0x400 security/tomoyo/file.c:822 security_inode_getattr+0xcf/0x140 security/security.c:1333 vfs_getattr fs/stat.c:157 [inline] vfs_statx+0x164/0x390 fs/stat.c:225 vfs_fstatat fs/stat.c:243 [inline] vfs_lstat include/linux/fs.h:3356 [inline] __do_sys_newlstat+0x91/0x110 fs/stat.c:398 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fb6989d3335 Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 RSP: 002b:00007fff12deed08 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 RAX: ffffffffffffffda RBX: 00005565e275df10 RCX: 00007fb6989d3335 RDX: 00007fff12deed40 RSI: 00007fff12deed40 RDI: 00005565e275cf10 RBP: 00007fff12deee00 R08: 00007fb698c921a8 R09: 0000000000001010 R10: 0000000000000020 R11: 0000000000000246 R12: 00005565e275cf10 R13: 00005565e275cf37 R14: 00005565e275f4c1 R15: 00005565e275f4c7 Modules linked in: ---[ end trace 476ab3de2ad6ad03 ]--- RIP: 0010:__phys_addr+0xd3/0x140 arch/x86/mm/physaddr.c:28 Code: e3 44 89 e9 31 ff 48 d3 eb 48 89 de e8 c6 b9 40 00 48 85 db 75 0f e8 dc b3 40 00 4c 89 e0 5b 5d 41 5c 41 5d c3 e8 cd b3 40 00 <0f> 0b e8 c6 b3 40 00 48 c7 c0 10 50 6b 8b 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc90001477930 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0007070000000707 RCX: 0000000000000000 RDX: ffff88801fbbe340 RSI: ffffffff81348f03 RDI: 0000000000000003 RBP: 0007070080000707 R08: 0007070080000707 R09: 0000000000000001 R10: ffffffff81348e7e R11: 000000000000003f R12: 00077e8000000707 R13: dffffc0000000000 R14: ffffc900014779a0 R15: ffffea0000000000 FS: 00007fb699b618c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556e8b848 CR3: 0000000020196000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600