------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 7272 Comm: syz-executor.5 Not tainted 5.9.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 7f 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e0 69 40 00 48 85 db 75 0d e8 56 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 49 6d 40 00 <0f> 0b e8 42 6d 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90006837d00 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0007700000000000 RCX: ffffffff8135d0e8
RDX: ffff88808eb88180 RSI: ffffffff8135d147 RDI: 0000000000000006
RBP: 0007700080000000 R08: 0000000000000001 R09: 0000000000000001
R10: 0007700080000000 R11: 0000000000000000 R12: 0007e78000000000
R13: ffffc90006837d68 R14: 0000000000000200 R15: dffffc0000000000
FS:  0000000001775940(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000021000000 CR3: 0000000098393000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:850 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xd9/0x170 mm/kasan/quarantine.c:165
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442
 slab_post_alloc_hook mm/slab.h:518 [inline]
 slab_alloc mm/slab.c:3316 [inline]
 kmem_cache_alloc+0x13a/0x3f0 mm/slab.c:3486
 getname_flags.part.0+0x50/0x4f0 fs/namei.c:138
 getname_flags fs/namei.c:2646 [inline]
 user_path_at_empty+0xa1/0x100 fs/namei.c:2646
 user_path_at include/linux/namei.h:59 [inline]
 ksys_umount fs/namespace.c:1751 [inline]
 __do_sys_umount fs/namespace.c:1759 [inline]
 __se_sys_umount fs/namespace.c:1757 [inline]
 __x64_sys_umount+0xdc/0x150 fs/namespace.c:1757
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x460ba7
Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:000000000169ecb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 000000000015d57d RCX: 0000000000460ba7
RDX: 000000000000000c RSI: 0000000000000002 RDI: 000000000169fdf0
RBP: 0000000000000ee9 R08: 0000000000000000 R09: 0000000001775940
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000169fdf0
R13: 000000000169fde0 R14: 0000000000000000 R15: 000000000169fdf0
Modules linked in:
---[ end trace c66c2eb77a4b76df ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 7f 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e0 69 40 00 48 85 db 75 0d e8 56 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 49 6d 40 00 <0f> 0b e8 42 6d 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90006837d00 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0007700000000000 RCX: ffffffff8135d0e8
RDX: ffff88808eb88180 RSI: ffffffff8135d147 RDI: 0000000000000006
RBP: 0007700080000000 R08: 0000000000000001 R09: 0000000000000001
R10: 0007700080000000 R11: 0000000000000000 R12: 0007e78000000000
R13: ffffc90006837d68 R14: 0000000000000200 R15: dffffc0000000000
FS:  0000000001775940(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc537b9b000 CR3: 0000000098393000 CR4: 00000000001526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400