general protection fault, probably for non-canonical address 0xdffffc0020000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: probably user-memory-access in range [0x0000000100000000-0x0000000100000007]
CPU: 0 PID: 10074 Comm: syz-executor241 Not tainted 5.15.182-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
RIP: 0010:xas_destroy lib/xarray.c:273 [inline]
RIP: 0010:xas_nomem+0x7e/0x1c0 lib/xarray.c:300
Code: e8 27 46 bd fd 4c 8b 33 4d 85 f6 75 12 e8 ea d2 77 fd e9 27 01 00 00 e8 e0 d2 77 fd 4d 89 ee 49 8d 7e 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 f6 45 bd fd 4d 8b 6e 08 49 83 c6 18 4c 89
RSP: 0000:ffffc90003bbf8e8 EFLAGS: 00010207
RAX: 0000000020000000 RBX: ffffc90003bbf9c0 RCX: ffff88801ffd9dc0
RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: 0000000100000007
RBP: 0000000000000cc0 R08: dffffc0000000000 R09: fffffbfff1ff3440
R10: fffffbfff1ff3440 R11: 1ffffffff1ff343f R12: dffffc0000000000
R13: 1ffff92000777f37 R14: 00000000ffffffff R15: 1ffff92000777f38
FS:  0000555578b31380(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4fe7467c50 CR3: 00000000798ac000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __add_to_page_cache_locked+0x8c5/0xf60 mm/filemap.c:938
 add_to_page_cache_lru+0x150/0x4a0 mm/filemap.c:984
 do_read_cache_page+0x1f9/0x1030 mm/filemap.c:3460
 read_mapping_page include/linux/pagemap.h:515 [inline]
 ntfs_map_page+0x24/0x390 fs/ntfs/aops.h:75
 ntfs_fill_super+0x3679/0x3c10 fs/ntfs3/super.c:1205
 get_tree_bdev+0x3f1/0x610 fs/super.c:1325
 vfs_get_tree+0x88/0x270 fs/super.c:1530
 do_new_mount+0x24a/0xa40 fs/namespace.c:3013
 do_mount fs/namespace.c:3356 [inline]
 __do_sys_mount fs/namespace.c:3564 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:3541
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f50650e13ca
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 3e 07 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff497092d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fff497092f0 RCX: 00007f50650e13ca
RDX: 000000002001f700 RSI: 000000002001f740 RDI: 00007fff497092f0
RBP: 0000000000000004 R08: 00007fff49709330 R09: 000000000001f6c2
R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
R13: 00007fff49709330 R14: 0000000000000003 R15: 0000000000200000
 </TASK>
Modules linked in:
---[ end trace bcefe5e31828c606 ]---
RIP: 0010:xas_destroy lib/xarray.c:273 [inline]
RIP: 0010:xas_nomem+0x7e/0x1c0 lib/xarray.c:300
Code: e8 27 46 bd fd 4c 8b 33 4d 85 f6 75 12 e8 ea d2 77 fd e9 27 01 00 00 e8 e0 d2 77 fd 4d 89 ee 49 8d 7e 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 f6 45 bd fd 4d 8b 6e 08 49 83 c6 18 4c 89
RSP: 0000:ffffc90003bbf8e8 EFLAGS: 00010207
RAX: 0000000020000000 RBX: ffffc90003bbf9c0 RCX: ffff88801ffd9dc0
RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: 0000000100000007
RBP: 0000000000000cc0 R08: dffffc0000000000 R09: fffffbfff1ff3440
R10: fffffbfff1ff3440 R11: 1ffffffff1ff343f R12: dffffc0000000000
R13: 1ffff92000777f37 R14: 00000000ffffffff R15: 1ffff92000777f38
FS:  0000555578b31380(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffbefc8e000 CR3: 00000000798ac000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	e8 27 46 bd fd       	call   0xfdbd462c
   5:	4c 8b 33             	mov    (%rbx),%r14
   8:	4d 85 f6             	test   %r14,%r14
   b:	75 12                	jne    0x1f
   d:	e8 ea d2 77 fd       	call   0xfd77d2fc
  12:	e9 27 01 00 00       	jmp    0x13e
  17:	e8 e0 d2 77 fd       	call   0xfd77d2fc
  1c:	4d 89 ee             	mov    %r13,%r14
  1f:	49 8d 7e 08          	lea    0x8(%r14),%rdi
  23:	48 89 f8             	mov    %rdi,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 80 3c 20 00       	cmpb   $0x0,(%rax,%r12,1) <-- trapping instruction
  2f:	74 05                	je     0x36
  31:	e8 f6 45 bd fd       	call   0xfdbd462c
  36:	4d 8b 6e 08          	mov    0x8(%r14),%r13
  3a:	49 83 c6 18          	add    $0x18,%r14
  3e:	4c                   	rex.WR
  3f:	89                   	.byte 0x89