------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 6830 Comm: syz-fuzzer Not tainted 5.9.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 49 7d 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 40 85 3f 00 48 85 db 75 0d e8 96 88 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 89 88 3f 00 <0f> 0b e8 82 88 3f 00 48 c7 c0 10 50 a9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90000ea7810 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0222222000000000 RCX: ffffffff8134b898
RDX: ffff888094490300 RSI: ffffffff8134b8f7 RDI: 0000000000000006
RBP: 0222222080000000 R08: 0000000000000001 R09: ffffffff8c5f0a8f
R10: 0222222080000000 R11: 0000000000000001 R12: 022299a000000000
R13: ffffc90000ea7870 R14: dffffc0000000000 R15: 0000000000000000
FS:  000000c00017e410(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000743138 CR3: 00000000a708f000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:843 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xda/0x160 mm/kasan/quarantine.c:165
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442
 slab_post_alloc_hook mm/slab.h:518 [inline]
 slab_alloc_node mm/slab.c:3254 [inline]
 kmem_cache_alloc_node_trace+0x13f/0x400 mm/slab.c:3592
 __do_kmalloc_node mm/slab.c:3614 [inline]
 __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3629
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 __alloc_skb+0xae/0x550 net/core/skbuff.c:210
 alloc_skb_fclone include/linux/skbuff.h:1135 [inline]
 sk_stream_alloc_skb+0x109/0xc30 net/ipv4/tcp.c:884
 tcp_sendmsg_locked+0xbb7/0x2d00 net/ipv4/tcp.c:1291
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1441
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 sock_write_iter+0x28c/0x3c0 net/socket.c:998
 call_write_iter include/linux/fs.h:1882 [inline]
 new_sync_write+0x422/0x650 fs/read_write.c:503
 vfs_write+0x5ad/0x730 fs/read_write.c:578
 ksys_write+0x1ee/0x250 fs/read_write.c:631
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4b3d8b
Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 db a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
RSP: 002b:000000c024e55410 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b3d8b
RDX: 0000000000000015 RSI: 000000c00000a200 RDI: 0000000000000006
RBP: 000000c024e55460 R08: 000000c00000a201 R09: 0000000000000015
R10: 000000c000112000 R11: 0000000000000202 R12: 000000000000011e
R13: 000000c000290000 R14: 000000000000000f R15: 000000000000307a
Modules linked in:
---[ end trace b860ca1a49ce7291 ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 49 7d 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 40 85 3f 00 48 85 db 75 0d e8 96 88 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 89 88 3f 00 <0f> 0b e8 82 88 3f 00 48 c7 c0 10 50 a9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90000ea7810 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0222222000000000 RCX: ffffffff8134b898
RDX: ffff888094490300 RSI: ffffffff8134b8f7 RDI: 0000000000000006
RBP: 0222222080000000 R08: 0000000000000001 R09: ffffffff8c5f0a8f
R10: 0222222080000000 R11: 0000000000000001 R12: 022299a000000000
R13: ffffc90000ea7870 R14: dffffc0000000000 R15: 0000000000000000
FS:  000000c00017e410(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000743138 CR3: 00000000a708f000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400