------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:28! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 PID: 13730 Comm: syz-executor.3 Not tainted 6.9.0-rc2-next-20240403-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__phys_addr+0x162/0x170 arch/x86/mm/physaddr.c:28 Code: e8 43 56 53 00 48 c7 c7 00 73 1a 8e 4c 89 f6 4c 89 fa e8 71 e3 a5 03 e9 45 ff ff ff e8 27 56 53 00 90 0f 0b e8 1f 56 53 00 90 <0f> 0b e8 17 56 53 00 90 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90004e16a30 EFLAGS: 00010046 RAX: ffffffff81421ec1 RBX: 0000000000000001 RCX: 0000000000040000 RDX: ffffc9000a853000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffffff81eed891 R08: ffffffff81421e0c R09: 1ffffffff292a70a R10: dffffc0000000000 R11: fffffbfff292a70b R12: 0000000000402800 R13: 0000000000000240 R14: 0000408004e16ac0 R15: 000000000000002e FS: 00007f3085cc26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055863a8e0040 CR3: 000000005ec5c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> virt_to_folio include/linux/mm.h:1307 [inline] virt_to_slab mm/kasan/../slab.h:204 [inline] poison_slab_object+0x1a/0x150 mm/kasan/common.c:222 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2180 [inline] memcg_alloc_abort_single+0x71/0x1c0 mm/slub.c:4393 memcg_slab_post_alloc_hook mm/slub.c:2097 [inline] slab_post_alloc_hook mm/slub.c:3909 [inline] slab_alloc_node mm/slub.c:3948 [inline] kmem_cache_alloc_lru_noprof+0x201/0x2b0 mm/slub.c:3967 xas_alloc lib/xarray.c:375 [inline] xas_create+0x10c1/0x16b0 lib/xarray.c:677 xas_store+0xa3/0x1980 lib/xarray.c:787 __filemap_add_folio+0xacc/0x19d0 mm/filemap.c:914 filemap_add_folio+0x157/0x650 mm/filemap.c:970 do_read_cache_folio+0x10a/0x820 mm/filemap.c:3749 do_read_cache_page+0x30/0x200 mm/filemap.c:3848 read_mapping_page include/linux/pagemap.h:891 [inline] dir_get_page fs/sysv/dir.c:64 [inline] sysv_find_entry+0x1af/0x410 fs/sysv/dir.c:157 sysv_inode_by_name+0x98/0x1f0 fs/sysv/dir.c:374 sysv_lookup+0x6b/0xe0 fs/sysv/namei.c:38 __lookup_slow+0x28c/0x3f0 fs/namei.c:1692 lookup_slow+0x53/0x70 fs/namei.c:1709 walk_component+0x2e1/0x410 fs/namei.c:2004 lookup_last fs/namei.c:2461 [inline] path_lookupat+0x16f/0x450 fs/namei.c:2485 filename_lookup+0x256/0x610 fs/namei.c:2514 kern_path+0x35/0x50 fs/namei.c:2622 lookup_bdev+0xc5/0x290 block/bdev.c:1127 resume_store+0x1a0/0x710 kernel/power/hibernate.c:1235 kernfs_fop_write_iter+0x3a1/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2112 [inline] iter_file_splice_write+0xbd7/0x14e0 fs/splice.c:743 do_splice_from fs/splice.c:941 [inline] direct_splice_actor+0x11e/0x220 fs/splice.c:1164 splice_direct_to_actor+0x58e/0xc90 fs/splice.c:1108 do_splice_direct_actor fs/splice.c:1207 [inline] do_splice_direct+0x28c/0x3e0 fs/splice.c:1233 do_sendfile+0x56d/0xdc0 fs/read_write.c:1295 __do_sys_sendfile64 fs/read_write.c:1356 [inline] __se_sys_sendfile64+0x100/0x1e0 fs/read_write.c:1348 do_syscall_64+0xfb/0x240 entry_SYSCALL_64_after_hwframe+0x72/0x7a RIP: 0033:0x7f3084e7dde9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3085cc20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007f3084fabf80 RCX: 00007f3084e7dde9 RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 RBP: 00007f3084eca47a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f3084fabf80 R15: 00007fff2704a868 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__phys_addr+0x162/0x170 arch/x86/mm/physaddr.c:28 Code: e8 43 56 53 00 48 c7 c7 00 73 1a 8e 4c 89 f6 4c 89 fa e8 71 e3 a5 03 e9 45 ff ff ff e8 27 56 53 00 90 0f 0b e8 1f 56 53 00 90 <0f> 0b e8 17 56 53 00 90 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 RSP: 0018:ffffc90004e16a30 EFLAGS: 00010046 RAX: ffffffff81421ec1 RBX: 0000000000000001 RCX: 0000000000040000 RDX: ffffc9000a853000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffffff81eed891 R08: ffffffff81421e0c R09: 1ffffffff292a70a R10: dffffc0000000000 R11: fffffbfff292a70b R12: 0000000000402800 R13: 0000000000000240 R14: 0000408004e16ac0 R15: 000000000000002e FS: 00007f3085cc26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055863a8e0040 CR3: 000000005ec5c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400