syzbot

------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28
Code: 9d ab 00 e9 45 ff ff ff e8 82 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 60 58 7a 03 e9 4d ff ff ff e8 66 b6 4b 00 90 <0f> 0b e8 5e b6 4b 00 90 0f 0b e8 56 b6 4b 00 90 0f 0b 0f 1f 00 90
RSP: 0018:ffffc900001d7878 EFLAGS: 00010246
RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffff88801d6b5a00
RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000
RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a8c084
R10: dffffc0000000000 R11: ffffffff89edbc30 R12: ffffffff89edbc30
R13: ffffffff81a8c084 R14: 000000017fff0000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f965da6aff0 CR3: 000000000df38000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 virt_to_folio include/linux/mm.h:1178 [inline]
 kfree+0x77/0x440 mm/slub.c:4834
 in_dev_free_rcu+0x49/0x60 net/ipv4/devinet.c:245
 rcu_do_batch kernel/rcu/tree.c:2576 [inline]
 rcu_core+0xca5/0x1710 kernel/rcu/tree.c:2832
 handle_softirqs+0x283/0x870 kernel/softirq.c:579
 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:968
 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:164
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28
Code: 9d ab 00 e9 45 ff ff ff e8 82 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 60 58 7a 03 e9 4d ff ff ff e8 66 b6 4b 00 90 <0f> 0b e8 5e b6 4b 00 90 0f 0b e8 56 b6 4b 00 90 0f 0b 0f 1f 00 90
RSP: 0018:ffffc900001d7878 EFLAGS: 00010246
RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffff88801d6b5a00
RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000
RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a8c084
R10: dffffc0000000000 R11: ffffffff89edbc30 R12: ffffffff89edbc30
R13: ffffffff81a8c084 R14: 000000017fff0000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f965da6aff0 CR3: 000000000df38000 CR4: 00000000003526f0