__free_contig_range_common+0x14f/0x250 mm/page_alloc.c:7072
 __free_contig_range mm/page_alloc.c:7117 [inline]
 free_pages_bulk+0x125/0x1f0 mm/page_alloc.c:5322
 vm_area_free_pages+0xb2/0x2a0 mm/vmalloc.c:3461
 vfree mm/vmalloc.c:3510 [inline]
 vfree+0xf2/0x6d0 mm/vmalloc.c:3484
 copy_entries_to_user net/ipv4/netfilter/ip_tables.c:864 [inline]
 get_entries net/ipv4/netfilter/ip_tables.c:1020 [inline]
 do_ipt_get_ctl+0x9d7/0xbf0 net/ipv4/netfilter/ip_tables.c:1669
 nf_getsockopt+0x7c/0xe0 net/netfilter/nf_sockopt.c:116
 ip_getsockopt+0x192/0x1e0 net/ipv4/ip_sockglue.c:1777
 tcp_getsockopt+0xa1/0x110 net/ipv4/tcp.c:4875
 do_sock_getsockopt+0x50a/0x6e0 net/socket.c:2503
 __sys_getsockopt+0x148/0x260 net/socket.c:2534
 __do_sys_getsockopt net/socket.c:2541 [inline]
 __se_sys_getsockopt net/socket.c:2538 [inline]
 __x64_sys_getsockopt+0xbd/0x160 net/socket.c:2538
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x123/0x790 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
------------[ cut here ]------------
kernel BUG at mm/filemap.c:858!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 7403 Comm: syz.4.452 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858
Code: 4b bf ff 48 c7 c6 80 db fe 8b 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 9d 4b bf ff 48 c7 c6 e0 db fe 8b 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 86 4b bf ff 90 0f 0b 90 e9 76 fe ff ff e8 78 4b bf ff 90
RSP: 0018:ffffc900032677d8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000
RDX: ffff888033483e80 RSI: ffffffff825fea18 RDI: ffff888033484344
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
R13: ffffea0000cf91c0 R14: 0000000000000000 R15: 1ffff9200064cf26
FS:  00005555597ac500(0000) GS:ffff888122932000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7a1ffd1d80 CR3: 0000000051964000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 filemap_add_folio+0x1d3/0x640 mm/filemap.c:972
 ra_alloc_folio mm/readahead.c:470 [inline]
 page_cache_ra_order+0x602/0xed0 mm/readahead.c:535
 do_sync_mmap_readahead mm/filemap.c:3443 [inline]
 filemap_fault+0x1943/0x3130 mm/filemap.c:3597
 __do_fault+0x10b/0x440 mm/memory.c:5565
 do_shared_fault mm/memory.c:6064 [inline]
 do_fault+0x585/0x1830 mm/memory.c:6138
 do_pte_missing mm/memory.c:4700 [inline]
 handle_pte_fault mm/memory.c:6558 [inline]
 __handle_mm_fault+0x150b/0x2f60 mm/memory.c:6707
 handle_mm_fault+0x363/0xa20 mm/memory.c:6876
 do_user_addr_fault+0x59c/0x12f0 arch/x86/mm/fault.c:1343
 handle_page_fault arch/x86/mm/fault.c:1483 [inline]
 exc_page_fault+0x6f/0xd0 arch/x86/mm/fault.c:1536
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595
RIP: 0033:0x7f40e316dc88
Code: fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 c5
RSP: 002b:00007ffc38a6f898 EFLAGS: 00010202
RAX: 00002000000000c0 RBX: 0000000000000004 RCX: 0030626c6c756e2f
RDX: 000000000000000c RSI: 6c756e2f7665642f RDI: 00002000000000c0
RBP: fffffffffffffffe R08: 0000001b32920000 R09: 0000000000000001
R10: 7ffffffffffffff3 R11: 0000000000000009 R12: 00007ffc38a6f9c0
R13: 00007f40e3425fac R14: 000000000002e071 R15: 00007ffc38a6f9a0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__filemap_add_folio+0x1033/0x12f0 mm/filemap.c:858
Code: 4b bf ff 48 c7 c6 80 db fe 8b 4c 89 ef e8 85 fa 12 00 90 0f 0b e8 9d 4b bf ff 48 c7 c6 e0 db fe 8b 4c 89 ef e8 6e fa 12 00 90 <0f> 0b e8 86 4b bf ff 90 0f 0b 90 e9 76 fe ff ff e8 78 4b bf ff 90
RSP: 0018:ffffc900032677d8 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000112cc0 RCX: 0000000000000000
RDX: ffff888033483e80 RSI: ffffffff825fea18 RDI: ffff888033484344
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002
R13: ffffea0000cf91c0 R14: 0000000000000000 R15: 1ffff9200064cf26
FS:  00005555597ac500(0000) GS:ffff888122932000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33a13ff8 CR3: 0000000051964000 CR4: 0000000000350ef0