Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 3 PID: 111 Comm: kswapd0 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:list_add_tail include/linux/list.h:183 [inline]
RIP: 0010:list_lru_add+0x14b/0x400 mm/list_lru.c:97
Code: 00 49 83 c4 40 4c 89 64 24 08 e8 b0 d0 bc ff 49 8d 44 24 08 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 31 02 00 00 4d 8b 7c 24 08 48 89 df 48 8b 54 24
RSP: 0018:ffffc90000e87068 EFLAGS: 00010002
RAX: dffffc0000000000 RBX: ffff88804c3e58d8 RCX: ffffc90000e86f30
RDX: 0000000000000001 RSI: ffffffff81d1aec0 RDI: ffff88801a5e8444
RBP: ffffffff94aeb6a0 R08: 0000000000000000 R09: fffffbfff1fc5742
R10: ffffffff8fe2ba17 R11: 0000000000000004 R12: 0000000000000000
R13: 0000000000000001 R14: ffff8880167f5280 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f48dc840130 CR3: 00000000288cc000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 workingset_update_node+0x1f5/0x250 mm/workingset.c:636
 xas_update lib/xarray.c:355 [inline]
 update_node lib/xarray.c:758 [inline]
 xas_store+0x9ee/0x1960 lib/xarray.c:845
 page_cache_delete mm/filemap.c:149 [inline]
 __filemap_remove_folio+0x3d6/0x750 mm/filemap.c:232
 __remove_mapping+0x3ce/0xba0 mm/vmscan.c:762
 shrink_folio_list+0x1d7c/0x4150 mm/vmscan.c:1428
 evict_folios+0x6e6/0x1bf0 mm/vmscan.c:4553
 try_to_shrink_lruvec+0x618/0x9b0 mm/vmscan.c:4749
 shrink_one+0x3f8/0x7c0 mm/vmscan.c:4788
 shrink_many mm/vmscan.c:4851 [inline]
 lru_gen_shrink_node+0x89f/0x1750 mm/vmscan.c:4951
 shrink_node mm/vmscan.c:5910 [inline]
 kswapd_shrink_node mm/vmscan.c:6720 [inline]
 balance_pgdat+0x1105/0x1970 mm/vmscan.c:6911
 kswapd+0x5ea/0xbf0 mm/vmscan.c:7180
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:list_add_tail include/linux/list.h:183 [inline]
RIP: 0010:list_lru_add+0x14b/0x400 mm/list_lru.c:97
Code: 00 49 83 c4 40 4c 89 64 24 08 e8 b0 d0 bc ff 49 8d 44 24 08 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 31 02 00 00 4d 8b 7c 24 08 48 89 df 48 8b 54 24
RSP: 0018:ffffc90000e87068 EFLAGS: 00010002
RAX: dffffc0000000000 RBX: ffff88804c3e58d8 RCX: ffffc90000e86f30
RDX: 0000000000000001 RSI: ffffffff81d1aec0 RDI: ffff88801a5e8444
RBP: ffffffff94aeb6a0 R08: 0000000000000000 R09: fffffbfff1fc5742
R10: ffffffff8fe2ba17 R11: 0000000000000004 R12: 0000000000000000
R13: 0000000000000001 R14: ffff8880167f5280 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f48dc840130 CR3: 00000000288cc000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	49 83 c4 40          	add    $0x40,%r12
   4:	4c 89 64 24 08       	mov    %r12,0x8(%rsp)
   9:	e8 b0 d0 bc ff       	call   0xffbcd0be
   e:	49 8d 44 24 08       	lea    0x8(%r12),%rax
  13:	48 89 c2             	mov    %rax,%rdx
  16:	48 89 44 24 18       	mov    %rax,0x18(%rsp)
  1b:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  22:	fc ff df
  25:	48 c1 ea 03          	shr    $0x3,%rdx
* 29:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2d:	0f 85 31 02 00 00    	jne    0x264
  33:	4d 8b 7c 24 08       	mov    0x8(%r12),%r15
  38:	48 89 df             	mov    %rbx,%rdi
  3b:	48                   	rex.W
  3c:	8b                   	.byte 0x8b
  3d:	54                   	push   %rsp
  3e:	24                   	.byte 0x24