------------[ cut here ]------------
kernel BUG at mm/vmscan.c:593!
------------[ cut here ]------------
invalid opcode: 0000 [#1] SMP KASAN
kernel BUG at mm/vmscan.c:593!
CPU: 0 PID: 1530 Comm: kswapd0 Not tainted 4.18.0-rc3-next-20180709+ #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline]
RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672
Code: 8d a8 fd ff ff f0 48 0f b3 08 e8 ed b5 da ff 48 8b 85 c0 fd ff ff c7 00 f8 f8 f8 f8 c6 40 04 f8 e9 5d fb ff ff e8 d2 b5 da ff <0f> 0b e8 cb b5 da ff 48 8b 9d d8 fd ff ff 31 ff 48 89 de e8 ea b6 
RSP: 0018:ffff8801d3e9f4c0 EFLAGS: 00010293
RAX: ffff8801d3eae040 RBX: ffff8801d3e9f710 RCX: ffffffff81a1c182
RDX: 0000000000000000 RSI: ffffffff81a1c48e RDI: 0000000000000007
RBP: ffff8801d3e9f738 R08: ffff8801d3eae040 R09: ffffed0039824cd0
R10: ffffed0039824cd0 R11: ffff8801cc126687 R12: dffffc0000000000
R13: ffff8801cc3171f0 R14: 0000000000000000 R15: ffff8801d3e9f550
FS:  0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5a9929d000 CR3: 000000019220c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 shrink_node+0x429/0x16a0 mm/vmscan.c:2736
 kswapd_shrink_node mm/vmscan.c:3458 [inline]
 balance_pgdat+0x7ca/0x1010 mm/vmscan.c:3568
 kswapd+0x82e/0x12f0 mm/vmscan.c:3790
 kthread+0x345/0x410 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:415
Modules linked in:
Dumping ftrace buffer:
   (ftrace buffer empty)
invalid opcode: 0000 [#2] SMP KASAN
---[ end trace 103ea02a98dbac07 ]---
CPU: 1 PID: 22768 Comm: syz-executor6 Tainted: G      D           4.18.0-rc3-next-20180709+ #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline]
RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672
RIP: 0010:shrink_slab_memcg mm/vmscan.c:593 [inline]
RIP: 0010:shrink_slab+0xb3e/0xdb0 mm/vmscan.c:672
Code: 
Code: 
8d a8 
8d 
fd ff ff 
a8 
f0 48 0f 
fd 
b3 08 e8 ed 
ff 
b5 da ff 48 
ff 
8b 85 c0 fd 
f0 
ff ff c7 
48 
00 f8 f8 f8 
0f 
f8 c6 40 04 
b3 
f8 e9 5d fb 
08 
ff ff e8 
e8 
d2 b5 da ff 
ed 
<0f> 0b e8 cb 
b5 
b5 da ff 48 
da 
8b 9d d8 fd 
ff 
ff ff 31 ff 
48 
48 89 de 
8b 
e8 ea b6 
85 
RSP: 0018:ffff8801b7db6260 EFLAGS: 00010293
c0 
RAX: ffff880191420340 RBX: ffff8801b7db64b0 RCX: ffffffff81a1c182
RDX: 0000000000000000 RSI: ffffffff81a1c48e RDI: 0000000000000007
RBP: ffff8801b7db64d8 R08: ffff880191420340 R09: ffffed0039824cd0
fd 
R10: ffffed0039824cd0 R11: ffff8801cc126687 R12: dffffc0000000000
R13: ffff8801cc3171f0 R14: 0000000000000000 R15: ffff8801b7db62f0
FS:  0000000002204940(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000
ff 
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5a9929d000 CR3: 0000000194659000 CR4: 00000000001406e0
ff 
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
c7 
Call Trace:
00 
f8 
f8 
 shrink_node+0x429/0x16a0 mm/vmscan.c:2736
f8 
f8 
c6 
40 
04 
f8 
e9 
 shrink_zones mm/vmscan.c:2965 [inline]
 do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3027
5d 
fb 
ff 
 try_to_free_pages+0x4b2/0xb80 mm/vmscan.c:3242
ff 
e8 
d2 
b5 
 __perform_reclaim mm/page_alloc.c:3769 [inline]
 __alloc_pages_direct_reclaim mm/page_alloc.c:3790 [inline]
 __alloc_pages_slowpath+0x953/0x2d00 mm/page_alloc.c:4191
da 
ff 
<0f> 
0b 
e8 
cb 
b5 
da 
ff 
48 
 __alloc_pages_nodemask+0xa7c/0xdb0 mm/page_alloc.c:4390
8b 
9d 
d8 
fd 
ff 
 alloc_pages_current+0x10c/0x210 mm/mempolicy.c:2093
ff 
 alloc_pages include/linux/gfp.h:492 [inline]
 __page_cache_alloc+0x398/0x5e0 mm/filemap.c:925
31 
ff 
 __do_page_cache_readahead+0x24e/0x690 mm/readahead.c:191
48 
89 
 ra_submit mm/internal.h:66 [inline]
 do_sync_mmap_readahead mm/filemap.c:2356 [inline]
 filemap_fault+0xe41/0x2220 mm/filemap.c:2432
de 
e8 
ea 
b6 
RSP: 0018:ffff8801d3e9f4c0 EFLAGS: 00010293
RAX: ffff8801d3eae040 RBX: ffff8801d3e9f710 RCX: ffffffff81a1c182
RDX: 0000000000000000 RSI: ffffffff81a1c48e RDI: 0000000000000007
RBP: ffff8801d3e9f738 R08: ffff8801d3eae040 R09: ffffed0039824cd0
R10: ffffed0039824cd0 R11: ffff8801cc126687 R12: dffffc0000000000
R13: ffff8801cc3171f0 R14: 0000000000000000 R15: ffff8801d3e9f550
FS:  0000000000000000(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
 __do_fault+0xee/0x450 mm/memory.c:3237
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5a9929d000 CR3: 000000019220c000 CR4: 00000000001406f0
 do_shared_fault mm/memory.c:3702 [inline]
 do_fault mm/memory.c:3751 [inline]
 handle_pte_fault mm/memory.c:3978 [inline]
 __handle_mm_fault+0x2ad5/0x4480 mm/memory.c:4102
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400