netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. ------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:27! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 2365 Comm: kworker/u4:4 Not tainted 4.19.143-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: krdsd rds_connect_worker RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27 Code: 80 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 c0 c6 38 00 48 85 db 75 0d e8 26 c5 38 00 4c 89 e0 5b 5d 41 5c c3 e8 19 c5 38 00 <0f> 0b e8 12 c5 38 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc RSP: 0018:ffff8880a111f4a0 EFLAGS: 00010293 RAX: ffff8880a1112440 RBX: 0700077007700077 RCX: ffffffff8130ec58 RDX: 0000000000000000 RSI: ffffffff8130ecb7 RDI: 0000000000000006 RBP: 0700077087700077 R08: 0000000000000000 R09: 0700077087700077 R10: 0000000000000006 R11: 0000000000000000 R12: 07007ef007700077 R13: ffff8880a111f4f8 R14: 0000000000000000 R15: 0000000000000282 FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f84b33c2db8 CR3: 00000000a518f000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: virt_to_head_page include/linux/mm.h:665 [inline] qlink_to_cache mm/kasan/quarantine.c:127 [inline] qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:163 quarantine_reduce+0x1a9/0x230 mm/kasan/quarantine.c:259 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:538 kmem_cache_alloc_node+0x146/0x3b0 mm/slab.c:3649 __alloc_skb+0x71/0x560 net/core/skbuff.c:193 alloc_skb_fclone include/linux/skbuff.h:1037 [inline] sk_stream_alloc_skb+0xba/0x850 net/ipv4/tcp.c:882 tcp_connect+0x201/0x2490 net/ipv4/tcp_output.c:3513 tcp_v4_connect+0x140c/0x1aa0 net/ipv4/tcp_ipv4.c:315 __inet_stream_connect+0x7e4/0xe00 net/ipv4/af_inet.c:655 inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:719 rds_tcp_conn_path_connect+0x61c/0x880 net/rds/tcp_connect.c:172 rds_connect_worker+0x194/0x2b0 net/rds/threads.c:175 process_one_work+0x864/0x1570 kernel/workqueue.c:2155 worker_thread+0x64c/0x1130 kernel/workqueue.c:2298 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Modules linked in: netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. ---[ end trace 88103bfa5738c794 ]--- RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27 Code: 80 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 c0 c6 38 00 48 85 db 75 0d e8 26 c5 38 00 4c 89 e0 5b 5d 41 5c c3 e8 19 c5 38 00 <0f> 0b e8 12 c5 38 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc RSP: 0018:ffff8880a111f4a0 EFLAGS: 00010293 RAX: ffff8880a1112440 RBX: 0700077007700077 RCX: ffffffff8130ec58 RDX: 0000000000000000 RSI: ffffffff8130ecb7 RDI: 0000000000000006 RBP: 0700077087700077 R08: 0000000000000000 R09: 0700077087700077 R10: 0000000000000006 R11: 0000000000000000 R12: 07007ef007700077 R13: ffff8880a111f4f8 R14: 0000000000000000 R15: 0000000000000282 FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead CR2: 0000000001190000 CR3: 000000009c472000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400