------------[ cut here ]------------ WARNING: CPU: 1 PID: 4299 at mm/vmscan.c:3839 get_pte_pfn mm/vmscan.c:3839 [inline] WARNING: CPU: 1 PID: 4299 at mm/vmscan.c:3839 lru_gen_look_around+0xb74/0x1330 mm/vmscan.c:4663 Modules linked in: CPU: 1 PID: 4299 Comm: syz-executor178 Not tainted 6.1.140-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : get_pte_pfn mm/vmscan.c:3839 [inline] pc : lru_gen_look_around+0xb74/0x1330 mm/vmscan.c:4663 lr : get_pte_pfn mm/vmscan.c:3839 [inline] lr : lru_gen_look_around+0xb74/0x1330 mm/vmscan.c:4663 sp : ffff800020cb5290 x29: ffff800020cb5320 x28: 0000000020040000 x27: 0160000125001fc3 x26: ffff0000de1c1000 x25: ffff0000d5f52000 x24: 0000000000125001 x23: ffff0000de1c1008 x22: 0100000000000000 x21: 1fffe0001bc38201 x20: dfff800000000000 x19: 0000000020001000 x18: 0000000000000000 x17: ffff8000181a0000 x16: ffff8000082d076c x15: 0000000000000000 x14: 00000000ffffffff x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 x11: ff00800008728cd8 x10: 0000000000000000 x9 : ffff800008728cd8 x8 : ffff0000d1fc0000 x7 : ffff800008737f50 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008728be0 x2 : 0000000000000001 x1 : 0100000000000000 x0 : 0000000000000000 Call trace: get_pte_pfn mm/vmscan.c:3839 [inline] lru_gen_look_around+0xb74/0x1330 mm/vmscan.c:4663 folio_referenced_one+0x368/0x9b4 mm/rmap.c:828 rmap_walk_anon+0x348/0x4d4 mm/rmap.c:2451 rmap_walk mm/rmap.c:2527 [inline] folio_referenced+0x2dc/0x3e8 mm/rmap.c:933 folio_check_references mm/vmscan.c:1463 [inline] shrink_folio_list+0xb20/0x4448 mm/vmscan.c:1796 evict_folios+0x387c/0x49d0 mm/vmscan.c:5046 lru_gen_shrink_lruvec mm/vmscan.c:5229 [inline] shrink_lruvec+0x958/0x34e4 mm/vmscan.c:5924 shrink_node_memcgs mm/vmscan.c:6145 [inline] shrink_node+0x52c/0x20ac mm/vmscan.c:6176 shrink_zones mm/vmscan.c:6417 [inline] do_try_to_free_pages+0x550/0x144c mm/vmscan.c:6479 try_to_free_mem_cgroup_pages+0x2d8/0xa50 mm/vmscan.c:6794 try_charge_memcg+0x48c/0x1448 mm/memcontrol.c:2686 obj_cgroup_charge_pages mm/memcontrol.c:3101 [inline] __memcg_kmem_charge_page+0x304/0x54c mm/memcontrol.c:3127 __alloc_pages+0x1fc/0x53c mm/page_alloc.c:5623 alloc_pages+0x434/0x6f8 mm/mempolicy.c:-1 vm_area_alloc_pages mm/vmalloc.c:2994 [inline] __vmalloc_area_node mm/vmalloc.c:3063 [inline] __vmalloc_node_range+0x734/0xe48 mm/vmalloc.c:3235 kvmalloc_node+0x168/0x1dc mm/util.c:606 kvmalloc include/linux/slab.h:716 [inline] kvzalloc include/linux/slab.h:724 [inline] ip_set_alloc+0x2c/0x3c net/netfilter/ipset/ip_set_core.c:261 hash_netiface_create+0x2c4/0xcb8 net/netfilter/ipset/ip_set_hash_gen.h:1515 ip_set_create+0x48c/0x1024 net/netfilter/ipset/ip_set_core.c:1111 nfnetlink_rcv_msg+0x9d4/0xed8 net/netfilter/nfnetlink.c:302 netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2493 nfnetlink_rcv+0x1f8/0x1afc net/netfilter/nfnetlink.c:659 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x600/0x818 net/netlink/af_netlink.c:1337 netlink_sendmsg+0x6e8/0x9b0 net/netlink/af_netlink.c:1859 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] ____sys_sendmsg+0x5b8/0x918 net/socket.c:2519 ___sys_sendmsg net/socket.c:2573 [inline] __sys_sendmsg+0x25c/0x320 net/socket.c:2602 __do_sys_sendmsg net/socket.c:2611 [inline] __se_sys_sendmsg net/socket.c:2609 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 534280 hardirqs last enabled at (534279): [] count_memcg_events include/linux/memcontrol.h:1066 [inline] hardirqs last enabled at (534279): [] count_memcg_folio_events include/linux/memcontrol.h:1084 [inline] hardirqs last enabled at (534279): [] shrink_folio_list+0x10b8/0x4448 mm/vmscan.c:2078 hardirqs last disabled at (534280): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (522406): [] softirq_handle_end kernel/softirq.c:421 [inline] softirqs last enabled at (522406): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:606 softirqs last disabled at (522401): [] __do_softirq+0x14/0x20 kernel/softirq.c:612 ---[ end trace 0000000000000000 ]--- syz-executor178 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 CPU: 1 PID: 4299 Comm: syz-executor178 Tainted: G W 6.1.140-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Call trace: dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 dump_header+0xc0/0x724 mm/oom_kill.c:467 oom_kill_process+0x360/0x674 mm/oom_kill.c:1046 out_of_memory+0xc5c/0xf68 mm/oom_kill.c:1184 mem_cgroup_out_of_memory+0x210/0x2bc mm/memcontrol.c:1711 mem_cgroup_oom mm/memcontrol.c:1941 [inline] try_charge_memcg+0xac4/0x1448 mm/memcontrol.c:2734 obj_cgroup_charge_pages mm/memcontrol.c:3101 [inline] __memcg_kmem_charge_page+0x304/0x54c mm/memcontrol.c:3127 __alloc_pages+0x1fc/0x53c mm/page_alloc.c:5623 alloc_pages+0x434/0x6f8 mm/mempolicy.c:-1 vm_area_alloc_pages mm/vmalloc.c:2994 [inline] __vmalloc_area_node mm/vmalloc.c:3063 [inline] __vmalloc_node_range+0x734/0xe48 mm/vmalloc.c:3235 kvmalloc_node+0x168/0x1dc mm/util.c:606 kvmalloc include/linux/slab.h:716 [inline] kvzalloc include/linux/slab.h:724 [inline] ip_set_alloc+0x2c/0x3c net/netfilter/ipset/ip_set_core.c:261 hash_netiface_create+0x2c4/0xcb8 net/netfilter/ipset/ip_set_hash_gen.h:1515 ip_set_create+0x48c/0x1024 net/netfilter/ipset/ip_set_core.c:1111 nfnetlink_rcv_msg+0x9d4/0xed8 net/netfilter/nfnetlink.c:302 netlink_rcv_skb+0x208/0x3c4 net/netlink/af_netlink.c:2493 nfnetlink_rcv+0x1f8/0x1afc net/netfilter/nfnetlink.c:659 netlink_unicast_kernel net/netlink/af_netlink.c:1311 [inline] netlink_unicast+0x600/0x818 net/netlink/af_netlink.c:1337 netlink_sendmsg+0x6e8/0x9b0 net/netlink/af_netlink.c:1859 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] ____sys_sendmsg+0x5b8/0x918 net/socket.c:2519 ___sys_sendmsg net/socket.c:2573 [inline] __sys_sendmsg+0x25c/0x320 net/socket.c:2602 __do_sys_sendmsg net/socket.c:2611 [inline] __se_sys_sendmsg net/socket.c:2609 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 memory: usage 307200kB, limit 307200kB, failcnt 89 memory+swap: usage 307228kB, limit 9007199254740988kB, failcnt 0 kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 Memory cgroup stats for /syz0: anon 0 file 0 kernel 314568704 kernel_stack 32768 pagetables 36864 sec_pagetables 0 percpu 0 sock 0 vmalloc 0 shmem 0 zswap 0 zswapped 0 file_mapped 0 file_dirty 0 file_writeback 0 swapcached 28672 anon_thp 0 file_thp 0 shmem_thp 0 inactive_anon 0 active_anon 0 inactive_file 0 active_file 0 unevictable 0 slab_reclaimable 14120 slab_unreclaimable 31024 slab 45144 Tasks state (memory values in pages): [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 4298] 0 4298 4324 13 32768 1 0 syz-executor178 [ 4299] 0 4299 4324 104 49152 6 1000 syz-executor178 oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor178,pid=4299,uid=0 Memory cgroup out of memory: Killed process 4299 (syz-executor178) total-vm:17296kB, anon-rss:32kB, file-rss:384kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:1000