------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:28!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28
Code: 8d ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 c0 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90
RSP: 0018:ffffc90000147878 EFLAGS: 00010246
RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00
RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000
RBP: ffffc90000147b50 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a021100 R12: ffffffff8a021100
R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000000c0 CR3: 000000007803c000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 virt_to_folio include/linux/mm.h:1180 [inline]
 kfree+0x77/0x440 mm/slub.c:4871
 in_dev_free_rcu+0x49/0x60 net/ipv4/devinet.c:245
 rcu_do_batch kernel/rcu/tree.c:2605 [inline]
 rcu_core+0xca8/0x1770 kernel/rcu/tree.c:2861
 handle_softirqs+0x283/0x870 kernel/softirq.c:579
 run_ksoftirqd+0x9b/0x100 kernel/softirq.c:968
 smpboot_thread_fn+0x53f/0xa60 kernel/smpboot.c:160
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__phys_addr+0x16b/0x180 arch/x86/mm/physaddr.c:28
Code: 8d ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 c0 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90
RSP: 0018:ffffc90000147878 EFLAGS: 00010246
RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00
RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000
RBP: ffffc90000147b50 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a021100 R12: ffffffff8a021100
R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000000c0 CR3: 000000007803c000 CR4: 00000000003526f0