------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 6885 Comm: syz-fuzzer Not tainted 5.9.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 7f 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e0 69 40 00 48 85 db 75 0d e8 56 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 49 6d 40 00 <0f> 0b e8 42 6d 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90003e977f8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0007700000000000 RCX: ffffffff8135d0e8
RDX: ffff888093eea0c0 RSI: ffffffff8135d147 RDI: 0000000000000006
RBP: 0007700080000000 R08: 0000000000000001 R09: ffffffff8d0c0a8f
R10: 0007700080000000 R11: 0000000000000000 R12: 0007e78000000000
R13: ffffc90003e97860 R14: 0000000000000200 R15: dffffc0000000000
FS:  0000000001992df0(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33528000 CR3: 00000000a1a18000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:850 [inline]
 qlink_to_cache mm/kasan/quarantine.c:128 [inline]
 qlist_free_all+0xd9/0x170 mm/kasan/quarantine.c:165
 quarantine_reduce+0x17e/0x200 mm/kasan/quarantine.c:261
 __kasan_kmalloc.constprop.0+0x9e/0xd0 mm/kasan/common.c:442
 slab_post_alloc_hook mm/slab.h:518 [inline]
 slab_alloc_node mm/slab.c:3258 [inline]
 kmem_cache_alloc_node_trace+0x144/0x430 mm/slab.c:3596
 __do_kmalloc_node mm/slab.c:3618 [inline]
 __kmalloc_node_track_caller+0x38/0x60 mm/slab.c:3633
 __kmalloc_reserve net/core/skbuff.c:142 [inline]
 __alloc_skb+0xae/0x550 net/core/skbuff.c:210
 alloc_skb_fclone include/linux/skbuff.h:1144 [inline]
 sk_stream_alloc_skb+0x109/0xc30 net/ipv4/tcp.c:884
 tcp_sendmsg_locked+0xbb7/0x2d20 net/ipv4/tcp.c:1291
 tcp_sendmsg+0x2b/0x40 net/ipv4/tcp.c:1441
 inet_sendmsg+0x99/0xe0 net/ipv4/af_inet.c:817
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 sock_write_iter+0x28c/0x3c0 net/socket.c:998
 call_write_iter include/linux/fs.h:1882 [inline]
 new_sync_write+0x422/0x650 fs/read_write.c:503
 vfs_write+0x5ad/0x730 fs/read_write.c:578
 ksys_write+0x1ee/0x250 fs/read_write.c:631
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x4b3d8b
Code: ff e9 69 ff ff ff cc cc cc cc cc cc cc cc cc e8 db a1 f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
RSP: 002b:000000c0002493e8 EFLAGS: 00000212 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000c00002c000 RCX: 00000000004b3d8b
RDX: 0000000000000017 RSI: 000000c00000a200 RDI: 0000000000000006
RBP: 000000c000249438 R08: 000000c00000a201 R09: 0000000000000017
R10: 000000c0000c6000 R11: 0000000000000212 R12: 000000000000011e
R13: 000000c0004b6000 R14: 000000000000000f R15: fffffffffffff262
Modules linked in:
---[ end trace f7895d7e1e521ed1 ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: 7f 23 0a 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 e0 69 40 00 48 85 db 75 0d e8 56 6d 40 00 4c 89 e0 5b 5d 41 5c c3 e8 49 6d 40 00 <0f> 0b e8 42 6d 40 00 48 c7 c0 10 50 e9 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffffc90003e977f8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0007700000000000 RCX: ffffffff8135d0e8
RDX: ffff888093eea0c0 RSI: ffffffff8135d147 RDI: 0000000000000006
RBP: 0007700080000000 R08: 0000000000000001 R09: ffffffff8d0c0a8f
R10: 0007700080000000 R11: 0000000000000000 R12: 0007e78000000000
R13: ffffc90003e97860 R14: 0000000000000200 R15: dffffc0000000000
FS:  0000000001992df0(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f38c42ab000 CR3: 00000000a1a18000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400