------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 19658 Comm: syz-executor.3 Not tainted 5.8.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: ea 79 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 a0 5b 3f 00 48 85 db 75 0d e8 f6 5e 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 e9 5e 3f 00 <0f> 0b e8 e2 5e 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc
RSP: 0000:ffffc90016927bb8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 00000000485abde0 RCX: ffffffff81345848
RDX: ffff888097a16440 RSI: ffffffff813458a7 RDI: 0000000000000006
RBP: 00000000c85abde0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000c85abde0 R11: 0000000000000000 R12: 00007780485abde0
R13: ffffc90016927c10 R14: 0000000000000000 R15: 0000000000000286
FS:  0000000001a6a940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000788060 CR3: 0000000085b90000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:841 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:164
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:260
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:475
 slab_post_alloc_hook mm/slab.h:586 [inline]
 slab_alloc mm/slab.c:3320 [inline]
 kmem_cache_alloc+0x12c/0x3b0 mm/slab.c:3484
 anon_vma_chain_alloc mm/rmap.c:136 [inline]
 __anon_vma_prepare+0x5d/0x560 mm/rmap.c:190
 anon_vma_prepare include/linux/rmap.h:153 [inline]
 do_huge_pmd_anonymous_page+0xdd0/0x2230 mm/huge_memory.c:725
 create_huge_pmd mm/memory.c:4107 [inline]
 __handle_mm_fault mm/memory.c:4328 [inline]
 handle_mm_fault+0x35dd/0x43f0 mm/memory.c:4394
 do_user_addr_fault+0x5a2/0xd00 arch/x86/mm/fault.c:1295
 handle_page_fault arch/x86/mm/fault.c:1365 [inline]
 exc_page_fault+0xab/0x170 arch/x86/mm/fault.c:1418
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:544
RIP: 0033:0x400604
Code: Bad RIP value.
RSP: 002b:0000000000c9fbb0 EFLAGS: 00010202
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 000000002001d000 RDI: 0000000000000001
RBP: 0000000000790000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000790008
R13: 0000000000c9fde0 R14: fffffffffffffffe R15: 0000000000c9fdf0
Modules linked in:
---[ end trace 498338888378deca ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: ea 79 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 a0 5b 3f 00 48 85 db 75 0d e8 f6 5e 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 e9 5e 3f 00 <0f> 0b e8 e2 5e 3f 00 48 c7 c0 10 10 a8 89 48 ba 00 00 00 00 00 fc
RSP: 0000:ffffc90016927bb8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 00000000485abde0 RCX: ffffffff81345848
RDX: ffff888097a16440 RSI: ffffffff813458a7 RDI: 0000000000000006
RBP: 00000000c85abde0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000c85abde0 R11: 0000000000000000 R12: 00007780485abde0
R13: ffffc90016927c10 R14: 0000000000000000 R15: 0000000000000286
FS:  0000000001a6a940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000000 CR3: 0000000085b90000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400