------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 3888 Comm: systemd-udevd Not tainted 5.8.0-rc4-next-20200710-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: ba 7a 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 00 65 3f 00 48 85 db 75 0d e8 56 68 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 49 68 3f 00 <0f> 0b e8 42 68 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90000f779b8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: eeeeeeeeeeeeeeee RCX: ffffffff81348788
RDX: ffff8880a1386580 RSI: ffffffff813487e7 RDI: 0000000000000006
RBP: eeeeeeef6eeeeeee R08: 0000000000000000 R09: 0000000000000000
R10: eeeeeeef6eeeeeee R11: 0000000000000000 R12: eeef666eeeeeeeee
R13: ffffc90000f77a18 R14: dffffc0000000000 R15: 0000000000000000
FS:  00007fb6a94f88c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc6d5614db8 CR3: 00000000a0e65000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:846 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xda/0x160 mm/kasan/quarantine.c:165
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442
 slab_post_alloc_hook mm/slab.h:535 [inline]
 slab_alloc mm/slab.c:3312 [inline]
 __do_kmalloc mm/slab.c:3653 [inline]
 __kmalloc+0x170/0x320 mm/slab.c:3664
 kmalloc include/linux/slab.h:559 [inline]
 tomoyo_realpath_from_path+0xc3/0x620 security/tomoyo/realpath.c:254
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_path_perm+0x212/0x3f0 security/tomoyo/file.c:822
 security_inode_getattr+0xcf/0x140 security/security.c:1287
 vfs_getattr fs/stat.c:121 [inline]
 vfs_statx_fd+0x70/0xf0 fs/stat.c:151
 vfs_fstat include/linux/fs.h:3172 [inline]
 __do_sys_newfstat+0x88/0x100 fs/stat.c:398
 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:384
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7fb6a836b2e2
Code: Bad RIP value.
RSP: 002b:00007ffddddbcf78 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fb6a836b2e2
RDX: 00007ffddddbcf80 RSI: 00007ffddddbcf80 RDI: 000000000000000e
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000110
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddddbd220
R13: 00005557069c9150 R14: 0000000000000100 R15: 00007ffddddbd0f0
Modules linked in:
---[ end trace c3d611d7021bb87d ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: ba 7a 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 00 65 3f 00 48 85 db 75 0d e8 56 68 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 49 68 3f 00 <0f> 0b e8 42 68 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90000f779b8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: eeeeeeeeeeeeeeee RCX: ffffffff81348788
RDX: ffff8880a1386580 RSI: ffffffff813487e7 RDI: 0000000000000006
RBP: eeeeeeef6eeeeeee R08: 0000000000000000 R09: 0000000000000000
R10: eeeeeeef6eeeeeee R11: 0000000000000000 R12: eeef666eeeeeeeee
R13: ffffc90000f77a18 R14: dffffc0000000000 R15: 0000000000000000
FS:  00007fb6a94f88c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc6d5614db8 CR3: 00000000a0e65000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400