------------[ cut here ]------------ kernel BUG at arch/x86/mm/physaddr.c:28! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28 Code: 9d ab 00 e9 45 ff ff ff e8 72 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 e0 55 7a 03 e9 4d ff ff ff e8 56 b6 4b 00 90 <0f> 0b e8 4e b6 4b 00 90 0f 0b e8 46 b6 4b 00 90 0f 0b 0f 1f 00 90 RSP: 0018:ffffc90000147878 EFLAGS: 00010246 RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffff88801cec3c00 RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a8c074 R10: dffffc0000000000 R11: ffffffff89edaa10 R12: ffffffff89edaa10 R13: ffffffff81a8c074 R14: 000000017fff0000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30b0fff8 CR3: 000000002420e000 CR4: 00000000003526f0 Call Trace: virt_to_folio include/linux/mm.h:1178 [inline] kfree+0x77/0x440 mm/slub.c:4834 in_dev_free_rcu+0x49/0x60 net/ipv4/devinet.c:245 rcu_do_batch kernel/rcu/tree.c:2576 [inline] rcu_core+0xca5/0x1710 kernel/rcu/tree.c:2832 handle_softirqs+0x283/0x870 kernel/softirq.c:579 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:968 smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:164 kthread+0x711/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28 Code: 9d ab 00 e9 45 ff ff ff e8 72 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 e0 55 7a 03 e9 4d ff ff ff e8 56 b6 4b 00 90 <0f> 0b e8 4e b6 4b 00 90 0f 0b e8 46 b6 4b 00 90 0f 0b 0f 1f 00 90 RSP: 0018:ffffc90000147878 EFLAGS: 00010246 RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffff88801cec3c00 RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a8c074 R10: dffffc0000000000 R11: ffffffff89edaa10 R12: ffffffff89edaa10 R13: ffffffff81a8c074 R14: 000000017fff0000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b30b0fff8 CR3: 000000002420e000 CR4: 00000000003526f0