------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:28! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 20714 Comm: kworker/u4:8 Not tainted 5.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krdsd rds_tcp_accept_worker RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28 Code: 33 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 90 69 40 00 48 85 db 75 0d e8 06 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 f9 6c 40 00 <0f> 0b e8 f2 6c 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc9000fd57a40 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0770077007700770 RCX: ffffffff8135d0e8 RDX: ffff88809f996280 RSI: ffffffff8135d147 RDI: 0000000000000006 RBP: 0770077087700770 R08: 0000000000000001 R09: ffffffff8d0b7aef R10: 0770077087700770 R11: 0000000000000000 R12: 07707ef007700770 R13: ffffc9000fd57aa8 R14: 0000000000000200 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000746138 CR3: 00000000a7bae000 CR4: 00000000001526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: virt_to_head_page include/linux/mm.h:850 [inline] qlink_to_cache mm/kasan/quarantine.c:128 [inline] qlist_free_all+0xd9/0x170 mm/kasan/quarantine.c:165 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442 slab_post_alloc_hook mm/slab.h:518 [inline] slab_alloc mm/slab.c:3312 [inline] kmem_cache_alloc+0x13a/0x3f0 mm/slab.c:3482 sock_alloc_inode+0x18/0x1c0 net/socket.c:253 alloc_inode+0x61/0x230 fs/inode.c:232 new_inode_pseudo+0x14/0xe0 fs/inode.c:928 sock_alloc+0x3c/0x260 net/socket.c:573 sock_create_lite+0x7b/0x120 net/socket.c:1226 rds_tcp_accept_one+0x14f/0xbe0 net/rds/tcp_listen.c:115 rds_tcp_accept_worker+0x50/0x80 net/rds/tcp.c:515 process_one_work+0x94c/0x1670 kernel/workqueue.c:2269 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415 kthread+0x3b5/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Modules linked in: ---[ end trace eb7d5640a98b1af3 ]--- RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28 Code: 33 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 90 69 40 00 48 85 db 75 0d e8 06 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 f9 6c 40 00 <0f> 0b e8 f2 6c 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc RSP: 0018:ffffc9000fd57a40 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0770077007700770 RCX: ffffffff8135d0e8 RDX: ffff88809f996280 RSI: ffffffff8135d147 RDI: 0000000000000006 RBP: 0770077087700770 R08: 0000000000000001 R09: ffffffff8d0b7aef R10: 0770077087700770 R11: 0000000000000000 R12: 07707ef007700770 R13: ffffc9000fd57aa8 R14: 0000000000000200 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000746138 CR3: 00000000a7bae000 CR4: 00000000001526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400