------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.9.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events_unbound call_usermodehelper_exec_work
RIP: 0010:__phys_addr+0x107/0x120 arch/x86/mm/physaddr.c:28
Code: eb ab 48 c7 c1 a5 ef 8e 89 80 e1 07 38 c1 0f 8c 75 ff ff ff 48 c7 c7 a5 ef 8e 89 e8 13 02 80 00 e9 64 ff ff ff e8 49 2b 40 00 <0f> 0b e8 42 2b 40 00 0f 0b e8 3b 2b 40 00 0f 0b 66 0f 1f 84 00 00
RSP: 0018:ffffc90000dd7630 EFLAGS: 00010293
RAX: ffffffff8134cf17 RBX: 07777777d2154500 RCX: ffff8880a9bf6580
RDX: 0000000000000000 RSI: 07777777d2154500 RDI: 0777eef752154500
RBP: 0777777752154500 R08: ffffffff8134ce51 R09: fffffbfff167d69c
R10: fffffbfff167d69c R11: 0000000000000000 R12: ffff888095256080
R13: 0000000000001900 R14: 0777eef752154500 R15: ffffea0000000000
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000746698 CR3: 0000000052de5000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:843 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all mm/kasan/quarantine.c:165 [inline]
 quarantine_reduce+0x130/0x1c0 mm/kasan/quarantine.c:261
 __kasan_kmalloc+0x32/0x130 mm/kasan/common.c:442
 slab_post_alloc_hook+0x3e/0x290 mm/slab.h:518
 slab_alloc_node mm/slab.c:3254 [inline]
 kmem_cache_alloc_node+0x1e5/0x280 mm/slab.c:3574
 alloc_task_struct_node kernel/fork.c:169 [inline]
 dup_task_struct+0x52/0x980 kernel/fork.c:858
 copy_process+0x516/0x5200 kernel/fork.c:1916
 _do_fork+0x1ab/0x6d0 kernel/fork.c:2428
 kernel_thread+0xf5/0x140 kernel/fork.c:2480
 call_usermodehelper_exec_work+0x57/0x220 kernel/umh.c:163
 process_one_work+0x789/0xfc0 kernel/workqueue.c:2269
 worker_thread+0xaa4/0x1460 kernel/workqueue.c:2415
 kthread+0x37e/0x3a0 drivers/block/aoe/aoecmd.c:1234
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Modules linked in:
---[ end trace 40a11de43c48641f ]---
RIP: 0010:__phys_addr+0x107/0x120 arch/x86/mm/physaddr.c:28
Code: eb ab 48 c7 c1 a5 ef 8e 89 80 e1 07 38 c1 0f 8c 75 ff ff ff 48 c7 c7 a5 ef 8e 89 e8 13 02 80 00 e9 64 ff ff ff e8 49 2b 40 00 <0f> 0b e8 42 2b 40 00 0f 0b e8 3b 2b 40 00 0f 0b 66 0f 1f 84 00 00
RSP: 0018:ffffc90000dd7630 EFLAGS: 00010293
RAX: ffffffff8134cf17 RBX: 07777777d2154500 RCX: ffff8880a9bf6580
RDX: 0000000000000000 RSI: 07777777d2154500 RDI: 0777eef752154500
RBP: 0777777752154500 R08: ffffffff8134ce51 R09: fffffbfff167d69c
R10: fffffbfff167d69c R11: 0000000000000000 R12: ffff888095256080
R13: 0000000000001900 R14: 0777eef752154500 R15: ffffea0000000000
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f347c03d0e8 CR3: 0000000096a39000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400