general protection fault, probably for non-canonical address 0xe01fed1021d9916e: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0x00ff88810ecc8b70-0x00ff88810ecc8b77]
CPU: 0 PID: 837 Comm: syz-executor Tainted: G        W         syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:mem_cgroup_nodeinfo include/linux/memcontrol.h:482 [inline]
RIP: 0010:mem_cgroup_lruvec include/linux/memcontrol.h:507 [inline]
RIP: 0010:__mod_lruvec_page_state include/linux/memcontrol.h:891 [inline]
RIP: 0010:unaccount_page_cache_page+0x353/0xac0 mm/filemap.c:208
Code: 8c 9f 86 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a8 06 00 00 48 63 05 cc c8 19 05 48 8d 9c c3 70 0b 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 ae cf 17 00 4c 8b 2b 4d 8d bd a8
RSP: 0018:ffffc900019875c8 EFLAGS: 00010002
RAX: 001ff11021d9916e RBX: 00ff88810ecc8b70 RCX: ffff88810bd993c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90001987610 R08: dffffc0000000000 R09: fffff9400095edf9
R10: fffff9400095edf9 R11: 1ffffd400095edf8 R12: 00000000ffffffff
R13: ffffea0004af6ff8 R14: ffffea0004af6fc0 R15: dffffc0000000000
FS:  00005555626e6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000001 CR3: 00000001213a7000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __delete_from_page_cache+0xc4/0x460 mm/filemap.c:243
 delete_from_page_cache+0xbe/0x100 mm/filemap.c:279
 truncate_inode_page+0x5d/0x70 mm/truncate.c:225
 shmem_undo_range+0x632/0x1760 mm/shmem.c:964
 shmem_truncate_range mm/shmem.c:1073 [inline]
 shmem_evict_inode+0x1fd/0x9c0 mm/shmem.c:1173
 evict+0x478/0x910 fs/inode.c:612
 iput_final fs/inode.c:1736 [inline]
 iput+0x638/0x7c0 fs/inode.c:1762
 dentry_unlink_inode+0x2cf/0x380 fs/dcache.c:378
 __dentry_kill+0x44f/0x650 fs/dcache.c:583
 dentry_kill+0xc0/0x2a0 fs/dcache.c:-1
 dput+0x42/0x80 fs/dcache.c:883
 __fput+0x4fe/0x770 fs/file_table.c:294
 ____fput+0x15/0x20 fs/file_table.c:314
 task_work_run+0x127/0x190 kernel/task_work.c:189
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_user_mode_loop+0xcb/0xe0 kernel/entry/common.c:172
 exit_to_user_mode_prepare+0x76/0xa0 kernel/entry/common.c:199
 syscall_exit_to_user_mode+0x1d/0x40 kernel/entry/common.c:274
 do_syscall_64+0x3d/0x40 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f1187066a77
Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffec9c6c558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f11870e9d7d RCX: 00007f1187066a77
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec9c6c610
RBP: 00007ffec9c6c610 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec9c6d6a0
R13: 00007f11870e9d7d R14: 0000000000015d75 R15: 00007ffec9c6d6e0
Modules linked in:
---[ end trace 0b4ff2838ee0515d ]---
RIP: 0010:mem_cgroup_nodeinfo include/linux/memcontrol.h:482 [inline]
RIP: 0010:mem_cgroup_lruvec include/linux/memcontrol.h:507 [inline]
RIP: 0010:__mod_lruvec_page_state include/linux/memcontrol.h:891 [inline]
RIP: 0010:unaccount_page_cache_page+0x353/0xac0 mm/filemap.c:208
Code: 8c 9f 86 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a8 06 00 00 48 63 05 cc c8 19 05 48 8d 9c c3 70 0b 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 ae cf 17 00 4c 8b 2b 4d 8d bd a8
RSP: 0018:ffffc900019875c8 EFLAGS: 00010002
RAX: 001ff11021d9916e RBX: 00ff88810ecc8b70 RCX: ffff88810bd993c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90001987610 R08: dffffc0000000000 R09: fffff9400095edf9
R10: fffff9400095edf9 R11: 1ffffd400095edf8 R12: 00000000ffffffff
R13: ffffea0004af6ff8 R14: ffffea0004af6fc0 R15: dffffc0000000000
FS:  00005555626e6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000001 CR3: 00000001213a7000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	8c 9f 86 48 c1 e8    	mov    %ds,-0x173eb77a(%rdi)
   6:	03 42 0f             	add    0xf(%rdx),%eax
   9:	b6 04                	mov    $0x4,%dh
   b:	38 84 c0 0f 85 a8 06 	cmp    %al,0x6a8850f(%rax,%rax,8)
  12:	00 00                	add    %al,(%rax)
  14:	48 63 05 cc c8 19 05 	movslq 0x519c8cc(%rip),%rax        # 0x519c8e7
  1b:	48 8d 9c c3 70 0b 00 	lea    0xb70(%rbx,%rax,8),%rbx
  22:	00
  23:	48 89 d8             	mov    %rbx,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1) <-- trapping instruction
  2f:	74 08                	je     0x39
  31:	48 89 df             	mov    %rbx,%rdi
  34:	e8 ae cf 17 00       	call   0x17cfe7
  39:	4c 8b 2b             	mov    (%rbx),%r13
  3c:	4d                   	rex.WRB
  3d:	8d                   	.byte 0x8d
  3e:	bd                   	.byte 0xbd
  3f:	a8                   	.byte 0xa8