RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69e453a6d4 R13: 00000000004c60ff R14: 00000000004daca8 R15: 00000000ffffffff Task in /syz3 killed as a result of limit of /syz3 memory: usage 3556kB, limit 0kB, failcnt 1213770 Kernel panic - not syncing: corrupted stack end detected inside scheduler CPU: 1 PID: 19753 Comm: syz-executor4 Not tainted 4.20.0-rc4+ #103 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 panic+0x2ad/0x55c kernel/panic.c:188 memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 schedule_debug kernel/sched/core.c:3285 [inline] __schedule+0x21c6/0x21d0 kernel/sched/core.c:3394 kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 preempt_schedule_irq+0xb9/0x140 kernel/sched/core.c:3699 retint_kernel+0x1b/0x2d RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:761 [inline] RIP: 0010:lock_acquire+0x268/0x520 kernel/locking/lockdep.c:3847 Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 44 02 00 00 48 83 3d 77 1f f0 07 00 0f 84 c3 01 00 00 48 8b bd 20 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 Memory cgroup stats for /syz3: cache:0KB rss:2288KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2184KB inactive_file:0KB active_file:0KB unevictable:0KB RSP: 0018:ffff888190e83518 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 RAX: dffffc0000000000 RBX: 1ffff110321d06a8 RCX: 0000000000000000 RDX: 1ffffffff12a3f6e RSI: 0000000000000000 RDI: 0000000000000282 RBP: ffff888190e83608 R08: ffff88819714cf00 R09: 0000000000000008 R10: 00000000000000a0 R11: ffff88819714c5c0 R12: ffff88819714c5c0 R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 rcu_lock_acquire include/linux/rcupdate.h:223 [inline] rcu_read_lock+0x29/0x70 include/linux/rcupdate.h:607 mem_cgroup_iter+0x208/0x1160 mm/memcontrol.c:934 Memory cgroup out of memory: Kill process 19754 (syz-executor3) score 8758000 or sacrifice child Killed process 19754 (syz-executor3) total-vm:70340kB, anon-rss:2136kB, file-rss:32768kB, shmem-rss:0kB syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 syz-executor4 cpuset=syz4 mems_allowed=0 shrink_node+0x516/0x16b0 mm/vmscan.c:2781 kobject: 'loop3' (00000000a7a52b93): kobject_uevent_env shrink_zones mm/vmscan.c:2987 [inline] do_try_to_free_pages+0x3e7/0x1290 mm/vmscan.c:3049 kobject: 'loop3' (00000000a7a52b93): fill_kobj_path: path = '/devices/virtual/block/loop3' try_to_free_mem_cgroup_pages+0x4cf/0xcd0 mm/vmscan.c:3350 try_charge+0x521/0x1700 mm/memcontrol.c:2211 mem_cgroup_try_charge+0x627/0xe20 mm/memcontrol.c:5890 IPVS: ftp: loaded support on port[0] = 21 __add_to_page_cache_locked+0x793/0x1840 mm/filemap.c:812 add_to_page_cache_lru+0x355/0xdb0 mm/filemap.c:886 pagecache_get_page+0x53a/0xf00 mm/filemap.c:1565 find_or_create_page include/linux/pagemap.h:322 [inline] ext4_mb_load_buddy_gfp+0xa80/0x1e70 fs/ext4/mballoc.c:1194 ext4_mb_load_buddy fs/ext4/mballoc.c:1241 [inline] ext4_mb_regular_allocator+0x634/0x1590 fs/ext4/mballoc.c:2190 ext4_mb_new_blocks+0x1de3/0x4840 fs/ext4/mballoc.c:4538 ext4_ext_map_blocks+0x2724/0x48f0 fs/ext4/extents.c:4404 ext4_map_blocks+0x8f7/0x1b50 fs/ext4/inode.c:636 _ext4_get_block+0x226/0x6d0 fs/ext4/inode.c:783 ext4_get_block_trans+0x1a6/0x2e0 fs/ext4/inode.c:844 ext4_dio_get_block_unwritten_sync+0x66/0xf0 fs/ext4/inode.c:916 get_more_blocks fs/direct-io.c:716 [inline] do_direct_IO+0x1941/0xc110 fs/direct-io.c:1001 do_blockdev_direct_IO+0xc30/0x9db0 fs/direct-io.c:1331 __blockdev_direct_IO+0x9d/0xc6 fs/direct-io.c:1417 ext4_direct_IO_write fs/ext4/inode.c:3774 [inline] ext4_direct_IO+0xbe6/0x2230 fs/ext4/inode.c:3901 generic_file_direct_write+0x275/0x4b0 mm/filemap.c:3043 __generic_file_write_iter+0x2ff/0x630 mm/filemap.c:3222 ext4_file_write_iter+0x390/0x1420 fs/ext4/file.c:266 call_write_iter include/linux/fs.h:1857 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x6b8/0x9f0 fs/read_write.c:487 vfs_write+0x1fc/0x560 fs/read_write.c:549 ksys_write+0x101/0x260 fs/read_write.c:598 __do_sys_write fs/read_write.c:610 [inline] __se_sys_write fs/read_write.c:607 [inline] __x64_sys_write+0x73/0xb0 fs/read_write.c:607 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x457679 Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f6b0dbdfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000007 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b0dbe06d4 R13: 00000000004c60ee R14: 00000000004dac90 R15: 00000000ffffffff CPU: 0 PID: 19752 Comm: syz-executor4 Not tainted 4.20.0-rc4+ #103 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x244/0x39d lib/dump_stack.c:113 dump_header+0x27b/0xf72 mm/oom_kill.c:441 oom_kill_process.cold.27+0x10/0x903 mm/oom_kill.c:953 out_of_memory+0xa84/0x1430 mm/oom_kill.c:1120 mem_cgroup_out_of_memory+0x15e/0x210 mm/memcontrol.c:1386 mem_cgroup_oom mm/memcontrol.c:1703 [inline] try_charge+0xda9/0x1700 mm/memcontrol.c:2260 mem_cgroup_try_charge+0x627/0xe20 mm/memcontrol.c:5890 __add_to_page_cache_locked+0x793/0x1840 mm/filemap.c:812 add_to_page_cache_lru+0x355/0xdb0 mm/filemap.c:886 page_cache_read mm/filemap.c:2316 [inline] filemap_fault+0x15c5/0x25f0 mm/filemap.c:2496 ext4_filemap_fault+0x82/0xad fs/ext4/inode.c:6292 __do_fault+0x100/0x6b0 mm/memory.c:2996 do_shared_fault mm/memory.c:3463 [inline] do_fault mm/memory.c:3538 [inline] handle_pte_fault mm/memory.c:3765 [inline] __handle_mm_fault+0x3ca6/0x5be0 mm/memory.c:3889 handle_mm_fault+0x54f/0xc70 mm/memory.c:3926 do_user_addr_fault arch/x86/mm/fault.c:1423 [inline] __do_page_fault+0x5e8/0xe60 arch/x86/mm/fault.c:1489 do_page_fault+0xf2/0x7e0 arch/x86/mm/fault.c:1520 page_fault+0x1e/0x30 arch/x86/entry/entry_64.S:1139 RIP: 0033:0x401797 Code: 00 00 00 48 83 ec 08 48 8b 15 b5 e8 63 00 48 8b 05 a6 e8 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 88 e8 63 00 48 83 c4 08 c3 48 89 c6 bf 60 62 4c 00 RSP: 002b:00007ffe021c49c0 EFLAGS: 00010287 RAX: 0000001b32040000 RBX: 0000000000000542 RCX: 0000001b33020000 RDX: 0000001b32040004 RSI: ffffffff87d86e44 RDI: 0000000081e4670c RBP: 000000000000065e R08: ffffffff8139ccf9 R09: 00000000faa55bca R10: 00007ffe021c4b30 R11: 0000000000000246 R12: 000000000072c180 R13: 0000000080000000 R14: 00007f6b0f1e1008 R15: 000000000000e3af Kernel Offset: disabled Rebooting in 86400 seconds..