------------[ cut here ]------------ kernel BUG at mm/vmscan.c:593! invalid opcode: 0000 [#1] SMP KASAN ------------[ cut here ]------------ CPU: 0 PID: 1534 Comm: kswapd0 Not tainted 4.18.0-rc4-next-20180710+ #3 kernel BUG at mm/vmscan.c:593! Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline] RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672 Code: 8d a8 fd ff ff f0 48 0f b3 08 e8 3d ab da ff 48 8b 85 c0 fd ff ff c7 00 f8 f8 f8 f8 c6 40 04 f8 e9 5d fb ff ff e8 22 ab da ff <0f> 0b e8 1b ab da ff 48 8b 9d d8 fd ff ff 31 ff 48 89 de e8 3a ac RSP: 0018:ffff8801d3eaf4c0 EFLAGS: 00010293 RAX: ffff8801d3ecc140 RBX: ffff8801d3eaf710 RCX: ffffffff81a1cd42 RDX: 0000000000000000 RSI: ffffffff81a1d04e RDI: 0000000000000007 RBP: ffff8801d3eaf738 R08: ffff8801d3ecc140 R09: ffffed0039836a68 R10: ffffed0039836a68 R11: ffff8801cc1b5347 R12: dffffc0000000000 R13: ffff8801cc33f2b0 R14: 0000000000000000 R15: ffff8801d3eaf550 FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001dad7d0 CR3: 000000019da6a000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: shrink_node+0x429/0x16a0 mm/vmscan.c:2736 kswapd_shrink_node mm/vmscan.c:3458 [inline] balance_pgdat+0x7ca/0x1010 mm/vmscan.c:3568 kswapd+0x82e/0x12f0 mm/vmscan.c:3790 kthread+0x345/0x410 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:415 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) invalid opcode: 0000 [#2] SMP KASAN ---[ end trace c65b862756611d4a ]--- CPU: 1 PID: 31767 Comm: syz-executor5 Tainted: G D 4.18.0-rc4-next-20180710+ #3 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline] RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672 RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline] RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672 Code: 8d a8 fd ff Code: ff f0 48 0f b3 8d 08 e8 3d ab da a8 ff 48 8b 85 c0 fd fd ff ff c7 00 f8 ff f8 f8 f8 c6 40 04 ff f8 e9 5d fb ff ff f0 e8 22 ab da ff <0f> 48 0b e8 1b ab da ff 0f 48 8b 9d d8 fd ff ff 31 b3 ff 48 89 de e8 08 3a ac RSP: 0018:ffff88019b9ce260 EFLAGS: 00010293 e8 RAX: ffff8801c243e080 RBX: ffff88019b9ce4b0 RCX: ffffffff81a1cd42 RDX: 0000000000000000 RSI: ffffffff81a1d04e RDI: 0000000000000007 RBP: ffff88019b9ce4d8 R08: ffff8801c243e080 R09: ffffed0039836a68 3d R10: ffffed0039836a68 R11: ffff8801cc1b5347 R12: dffffc0000000000 R13: ffff8801cc33f2b0 R14: 0000000000000000 R15: ffff88019b9ce2f0 FS: 00000000027c9940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 ab CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001dad7d0 CR3: 00000001963c6000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 da DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ff 48 8b 85 c0 shrink_node+0x429/0x16a0 mm/vmscan.c:2736 fd ff ff c7 00 f8 shrink_zones mm/vmscan.c:2965 [inline] do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3027 f8 f8 f8 try_to_free_pages+0x4b2/0xb80 mm/vmscan.c:3242 c6 40 04 f8 e9 __perform_reclaim mm/page_alloc.c:3769 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:3790 [inline] __alloc_pages_slowpath+0x953/0x2d00 mm/page_alloc.c:4191 5d fb ff ff e8 22 ab da ff __alloc_pages_nodemask+0xa7c/0xdb0 mm/page_alloc.c:4390 <0f> 0b e8 1b ab alloc_pages_current+0x10c/0x210 mm/mempolicy.c:2093 alloc_pages include/linux/gfp.h:492 [inline] __page_cache_alloc+0x398/0x5e0 mm/filemap.c:925 da ff __do_page_cache_readahead+0x24e/0x690 mm/readahead.c:192 48 8b 9d ra_submit mm/internal.h:66 [inline] do_sync_mmap_readahead mm/filemap.c:2356 [inline] filemap_fault+0xe41/0x2220 mm/filemap.c:2432 d8 fd ff ff 31 ff 48 89 de e8 3a __do_fault+0xee/0x450 mm/memory.c:3238 ac RSP: 0018:ffff8801d3eaf4c0 EFLAGS: 00010293 do_shared_fault mm/memory.c:3703 [inline] do_fault mm/memory.c:3752 [inline] handle_pte_fault mm/memory.c:3979 [inline] __handle_mm_fault+0x2ad5/0x4480 mm/memory.c:4103 RAX: ffff8801d3ecc140 RBX: ffff8801d3eaf710 RCX: ffffffff81a1cd42 RDX: 0000000000000000 RSI: ffffffff81a1d04e RDI: 0000000000000007 RBP: ffff8801d3eaf738 R08: ffff8801d3ecc140 R09: ffffed0039836a68 R10: ffffed0039836a68 R11: ffff8801cc1b5347 R12: dffffc0000000000 R13: ffff8801cc33f2b0 R14: 0000000000000000 R15: ffff8801d3eaf550 handle_mm_fault+0x53e/0xc80 mm/memory.c:4140 FS: 0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 __do_page_fault+0x620/0xe50 arch/x86/mm/fault.c:1397 CR2: 0000000001dad7d0 CR3: 000000019da6a000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 do_page_fault+0xf6/0x8c0 arch/x86/mm/fault.c:1472