BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 PGD 1a691f067 P4D 1a691f067 PUD 1a6920067 PMD 0 Oops: 0010 [#1] SMP KASAN CPU: 1 PID: 4786 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180712+ #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010: (null) Code: Bad RIP value. RSP: 0000:ffff8801a69f7278 EFLAGS: 00010246 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a1b96d RDX: 1ffff10039865656 RSI: ffff8801a69f74f8 RDI: ffff8801cc32b2b0 RBP: ffff8801a69f7468 R08: ffff8801ad766240 R09: ffffed00399e7c60 R10: ffffed00399e7c60 R11: ffff8801ccf3e307 R12: ffff8801a69f74f8 R13: ffff8801cc32b2b0 R14: ffff8801cc32b2d8 R15: 0000000000000080 FS: 0000000001f17940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001a691e000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: shrink_slab_memcg mm/vmscan.c:598 [inline] shrink_slab+0x861/0xa60 mm/vmscan.c:671 shrink_node+0x429/0x16a0 mm/vmscan.c:2735 shrink_zones mm/vmscan.c:2964 [inline] do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3026 try_to_free_mem_cgroup_pages+0x49d/0xc90 mm/vmscan.c:3324 reclaim_high.constprop.73+0x137/0x1e0 mm/memcontrol.c:2060 mem_cgroup_handle_over_high+0x8d/0x130 mm/memcontrol.c:2085 tracehook_notify_resume include/linux/tracehook.h:195 [inline] exit_to_usermode_loop+0x287/0x380 arch/x86/entry/common.c:166 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline] syscall_return_slowpath arch/x86/entry/common.c:268 [inline] do_syscall_64+0x6be/0x820 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45412a Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 RSP: 002b:00007ffe34e4b600 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: 0000000000000961 RBX: 00007ffe34e4b600 RCX: 000000000045412a RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 00007ffe34e4b640 R08: 0000000000000001 R09: 0000000001f17940 R10: 0000000001f17c10 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000000 R15: 00000000007034c0 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) CR2: 0000000000000000 BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 ---[ end trace 428032fa3d0ec929 ]--- PGD 1af4af067 P4D 1af4af067 PUD 1b178e067 PMD 0 Oops: 0010 [#2] SMP KASAN CPU: 0 PID: 32656 Comm: syz-executor6 Tainted: G D 4.18.0-rc4-next-20180712+ #6 RIP: 0010: (null) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010: (null) Code: Bad RIP value. Code: RSP: 0018:ffff8801d8eb72c0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a1b96d RDX: 1ffff10039865656 RSI: ffff8801d8eb7540 RDI: ffff8801cc32b2b0 RBP: ffff8801d8eb74b0 R08: ffff8801c9cec180 R09: ffffed00399e7c60 R10: ffffed00399e7c60 R11: ffff8801ccf3e307 R12: ffff8801d8eb7540 Bad RIP value. R13: ffff8801cc32b2b0 R14: ffff8801cc32b2d8 R15: 0000000000000080 FS: 0000000001f17940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 00000001ce4eb000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 RSP: 0000:ffff8801a69f7278 EFLAGS: 00010246 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a1b96d RDX: 1ffff10039865656 RSI: ffff8801a69f74f8 RDI: ffff8801cc32b2b0 shrink_slab_memcg mm/vmscan.c:598 [inline] shrink_slab+0x861/0xa60 mm/vmscan.c:671 RBP: ffff8801a69f7468 R08: ffff8801ad766240 R09: ffffed00399e7c60 R10: ffffed00399e7c60 R11: ffff8801ccf3e307 R12: ffff8801a69f74f8 shrink_node+0x429/0x16a0 mm/vmscan.c:2735 R13: ffff8801cc32b2b0 R14: ffff8801cc32b2d8 R15: 0000000000000080 FS: 0000000001f17940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 shrink_zones mm/vmscan.c:2964 [inline] do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3026 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 try_to_free_mem_cgroup_pages+0x49d/0xc90 mm/vmscan.c:3324 CR2: ffffffffffffffd6 CR3: 00000001a691e000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 reclaim_high.constprop.73+0x137/0x1e0 mm/memcontrol.c:2060