348808 pages reserved
0 pages cma reserved
------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 26030 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: a3 52 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 50 31 3f 00 48 85 db 75 0d e8 b6 2f 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 a9 2f 3f 00 <0f> 0b e8 a2 2f 3f 00 48 c7 c0 10 50 87 89 48 ba 00 00 00 00 00 fc
RSP: 0000:ffffc900019972a8 EFLAGS: 00010046
RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000ff07000
RDX: 0000000000040000 RSI: ffffffff813365d7 RDI: 0000000000000007
RBP: ffffc90097769000 R08: ffff8880467a0180 R09: ffffed1015ce7084
R10: ffffed1015ce7083 R11: ffff8880ae73841b R12: 0000408017769000
R13: 00000000fffffff4 R14: ffffc90017769000 R15: 000000000000001d
FS:  00007fe1964fc700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000045c81f CR3: 000000005f38d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:726 [inline]
 virt_to_cache mm/slab.h:474 [inline]
 kfree+0x77/0x2b0 mm/slab.c:3749
 hash_netport_create+0xb8e/0xd50 net/netfilter/ipset/ip_set_hash_gen.h:1536
 ip_set_create+0x6a7/0x13c0 net/netfilter/ipset/ip_set_core.c:1125
 nfnetlink_rcv_msg+0xc83/0xf30 net/netfilter/nfnetlink.c:229
 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2478
 nfnetlink_rcv+0x1ac/0x420 net/netfilter/nfnetlink.c:563
 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline]
 netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329
 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918
 sock_sendmsg_nosec net/socket.c:652 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:672
 ____sys_sendmsg+0x6b9/0x7d0 net/socket.c:2343
 ___sys_sendmsg+0x100/0x170 net/socket.c:2397
 __sys_sendmsg+0xec/0x1b0 net/socket.c:2430
 do_syscall_64+0xf6/0x790 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c849
Code: Bad RIP value.
RSP: 002b:00007fe1964fbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fe1964fc6d4 RCX: 000000000045c849
RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000004
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000922 R14: 00000000004cbbe7 R15: 000000000076bf0c
Modules linked in:
---[ end trace 87a6f7b0592d6dd7 ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28
Code: a3 52 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 50 31 3f 00 48 85 db 75 0d e8 b6 2f 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 a9 2f 3f 00 <0f> 0b e8 a2 2f 3f 00 48 c7 c0 10 50 87 89 48 ba 00 00 00 00 00 fc
RSP: 0000:ffffc900019972a8 EFLAGS: 00010046
RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000ff07000
RDX: 0000000000040000 RSI: ffffffff813365d7 RDI: 0000000000000007
RBP: ffffc90097769000 R08: ffff8880467a0180 R09: ffffed1015ce7084
R10: ffffed1015ce7083 R11: ffff8880ae73841b R12: 0000408017769000
R13: 00000000fffffff4 R14: ffffc90017769000 R15: 000000000000001d
FS:  00007fe1964fc700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000045c81f CR3: 000000005f38d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400