0 pages HighMem/MovableOnly 349380 pages reserved 0 pages cma reserved ------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:28! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 27171 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28 Code: a5 55 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 99 3f 00 48 85 db 75 0d e8 56 98 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 49 98 3f 00 <0f> 0b e8 42 98 3f 00 48 c7 c0 10 10 88 89 48 ba 00 00 00 00 00 fc RSP: 0000:ffffc900013c72b0 EFLAGS: 00010046 RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000fd56000 RDX: 0000000000040000 RSI: ffffffff81339667 RDI: 0000000000000007 RBP: ffffc9011a35c000 R08: ffff88809393a300 R09: ffffed1015ce7104 R10: ffff8880ae73881b R11: ffffed1015ce7103 R12: 000040809a35c000 R13: 0000000000040000 R14: ffffc9009a35c000 R15: ffffc900013c73b8 FS: 00007f7b46ff6700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000045c7ff CR3: 00000000a7458000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: virt_to_head_page include/linux/mm.h:833 [inline] virt_to_cache mm/slab.h:474 [inline] kfree+0x77/0x2b0 mm/slab.c:3749 hash_ipportip_create+0xb9d/0xd60 net/netfilter/ipset/ip_set_hash_gen.h:1536 ip_set_create+0x6ad/0x13b0 net/netfilter/ipset/ip_set_core.c:1126 nfnetlink_rcv_msg+0xc83/0xf30 net/netfilter/nfnetlink.c:229 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 nfnetlink_rcv+0x1ac/0x420 net/netfilter/nfnetlink.c:563 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6bf/0x7e0 net/socket.c:2362 ___sys_sendmsg+0x100/0x170 net/socket.c:2416 __sys_sendmsg+0xec/0x1b0 net/socket.c:2449 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45c829 Code: Bad RIP value. RSP: 002b:00007f7b46ff5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00000000004fd660 RCX: 000000000045c829 RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 000000000000092a R14: 00000000004cbc77 R15: 00007f7b46ff66d4 Modules linked in: ---[ end trace 8954ea43f0d6b173 ]--- RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:28 Code: a5 55 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 99 3f 00 48 85 db 75 0d e8 56 98 3f 00 4c 89 e0 5b 5d 41 5c c3 e8 49 98 3f 00 <0f> 0b e8 42 98 3f 00 48 c7 c0 10 10 88 89 48 ba 00 00 00 00 00 fc RSP: 0000:ffffc900013c72b0 EFLAGS: 00010046 RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9000fd56000 RDX: 0000000000040000 RSI: ffffffff81339667 RDI: 0000000000000007 RBP: ffffc9011a35c000 R08: ffff88809393a300 R09: ffffed1015ce7104 R10: ffff8880ae73881b R11: ffffed1015ce7103 R12: 000040809a35c000 R13: 0000000000040000 R14: ffffc9009a35c000 R15: ffffc900013c73b8 FS: 00007f7b46ff6700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000045c7ff CR3: 00000000a7458000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400