------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 6840 Comm: syz-fuzzer Not tainted 5.9.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 95 7d 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 a0 90 3f 00 48 85 db 75 0d e8 f6 93 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 e9 93 3f 00 <0f> 0b e8 e2 93 3f 00 48 c7 c0 10 50 a9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90001167800 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0002200000000220 RCX: ffffffff8134b998
RDX: ffff88808dcd42c0 RSI: ffffffff8134b9f7 RDI: 0000000000000006
RBP: 0002200080000220 R08: 0000000000000001 R09: ffffffff8c5f4a8f
R10: 0002200080000220 R11: 0000000000000001 R12: 0002978000000220
R13: ffffc90001167868 R14: 0000000000000200 R15: dffffc0000000000
FS:  000000c00003f910(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558e4276b550 CR3: 00000000a8133000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:848 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xd9/0x170 mm/kasan/quarantine.c:165
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442
 kmem_cache_alloc_node_trace+0x17b/0x3f0 mm/slab.c:3594
 __do_kmalloc_node mm/slab.c:3614 [inline]
 __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3629
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 __alloc_skb+0xae/0x550 net/core/skbuff.c:210
 alloc_skb_fclone include/linux/skbuff.h:1144 [inline]
 sk_stream_alloc_skb+0x109/0xc30 net/ipv4/tcp.c:884
 tcp_sendmsg_locked+0xbb7/0x2d00 net/ipv4/tcp.c:1291
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1441
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 sock_write_iter+0x28c/0x3c0 net/socket.c:998
 call_write_iter include/linux/fs.h:1882 [inline]
 new_sync_write+0x422/0x650 fs/read_write.c:503
 vfs_write+0x5ad/0x730 fs/read_write.c:578
 ksys_write+0x1ee/0x250 fs/read_write.c:631
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4b3d8b
Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 db a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
RSP: 002b:000000c009e233e8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000c00002e800 RCX: 00000000004b3d8b
RDX: 000000000000004a RSI: 000000c00000a200 RDI: 0000000000000006
RBP: 000000c009e23438 R08: 000000c00000a201 R09: 000000000000004a
R10: 000000c000110000 R11: 0000000000000212 R12: 000000000000011e
R13: 000000c000296000 R14: 000000000000003f R15: 0000000000007bec
Modules linked in:
---[ end trace 1f215368dfa3712f ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 95 7d 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 a0 90 3f 00 48 85 db 75 0d e8 f6 93 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 e9 93 3f 00 <0f> 0b e8 e2 93 3f 00 48 c7 c0 10 50 a9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90001167800 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0002200000000220 RCX: ffffffff8134b998
RDX: ffff88808dcd42c0 RSI: ffffffff8134b9f7 RDI: 0000000000000006
RBP: 0002200080000220 R08: 0000000000000001 R09: ffffffff8c5f4a8f
R10: 0002200080000220 R11: 0000000000000001 R12: 0002978000000220
R13: ffffc90001167868 R14: 0000000000000200 R15: dffffc0000000000
FS:  000000c00003f910(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7db0e6e000 CR3: 00000000a8133000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400