diff --git a/[refs] b/[refs]
index 4cffed1f9915..4480b958186f 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: c64562eaf2ad61d7492788ef95678f52d0d28f2a
+refs/heads/master: f3dfd1538f26f1ecf86daaf3d0c321d87e5de041
diff --git a/trunk/net/netfilter/ipset/ip_set_bitmap_ip.c b/trunk/net/netfilter/ipset/ip_set_bitmap_ip.c
index 3b5920bfc784..49323110560c 100644
--- a/trunk/net/netfilter/ipset/ip_set_bitmap_ip.c
+++ b/trunk/net/netfilter/ipset/ip_set_bitmap_ip.c
@@ -478,6 +478,7 @@ bitmap_ip_create(struct ip_set *set, struct nlattr *tb[], u32 flags)
 
 		if (cidr >= 32)
 			return -IPSET_ERR_INVALID_CIDR;
+		first_ip &= ip_set_hostmask(cidr);
 		last_ip = first_ip | ~ip_set_hostmask(cidr);
 	} else
 		return -IPSET_ERR_PROTOCOL;