------------[ cut here ]------------
kernel BUG at mm/swap_cgroup.c:78!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 12455 Comm: syz.2.1166 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:swap_cgroup_record+0x19c/0x1c0
Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 cf 77 f6 ff e9 28 ff ff ff e8 75 1a 8f ff 90 <0f> 0b e8 6d 1a 8f ff 4c 89 f7 48 c7 c6 00 f5 98 8b e8 5e a6 f4 fe
RSP: 0018:ffffc900045a51c0 EFLAGS: 00010093
RAX: ffffffff8233620b RBX: 00000000000036fd RCX: ffff88816c6c1d40
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff520008b4a28 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffc9002153e000 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff88818e409000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000c2c0 CR3: 0000000114d90000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 memcg1_swapout+0x2ee/0x820
 __remove_mapping+0xac5/0xe30
 shrink_folio_list+0x314f/0x53f0
 evict_folios+0x4795/0x5880
 try_to_shrink_lruvec+0xa1e/0xdb0
 shrink_lruvec+0x4fc/0x28b0
 shrink_node+0xa09/0x3800
 do_try_to_free_pages+0x6a2/0x1980
 try_to_free_mem_cgroup_pages+0x2dd/0x770
 try_charge_memcg+0xa2e/0x12a0
 charge_memcg+0x9f/0x180
 __mem_cgroup_charge+0x25/0x80
 shmem_alloc_and_add_folio+0x7d0/0xf80
 shmem_get_folio_gfp+0x5a9/0x1670
 shmem_write_begin+0x16c/0x330
 generic_perform_write+0x2e2/0x8f0
 shmem_file_write_iter+0xf8/0x120
 __kernel_write_iter+0x41e/0x880
 dump_user_range+0x8ba/0xc70
 elf_core_dump+0x34c2/0x3ad0
 coredump_write+0x11de/0x1980
 vfs_coredump+0x369e/0x4270
 get_signal+0x1107/0x1330
 arch_do_signal_or_restart+0xbc/0x830
 irqentry_exit+0x175/0x610
 asm_exc_page_fault+0x26/0x30
RIP: 0033:0x7f28a86514f7
Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
RSP: 002b:00007f28a96280a0 EFLAGS: 00010206
RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f28a879acb9
RDX: 00007f28a96280c0 RSI: 00007f28a96281f0 RDI: 000000000000000b
RBP: 00007f28a8808bf7 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007f28a8a16038 R14: 00007f28a8a15fa0 R15: 00007fff39241568
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:swap_cgroup_record+0x19c/0x1c0
Code: 02 e9 6d ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 35 ff ff ff 4c 89 f7 e8 cf 77 f6 ff e9 28 ff ff ff e8 75 1a 8f ff 90 <0f> 0b e8 6d 1a 8f ff 4c 89 f7 48 c7 c6 00 f5 98 8b e8 5e a6 f4 fe
RSP: 0018:ffffc900045a51c0 EFLAGS: 00010093
RAX: ffffffff8233620b RBX: 00000000000036fd RCX: ffff88816c6c1d40
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff520008b4a28 R12: dffffc0000000000
R13: 0000000000000000 R14: ffffc9002153e000 R15: 0000000000000002
FS:  0000000000000000(0000) GS:ffff88818e409000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000020000000c2c0 CR3: 0000000114d90000 CR4: 00000000000006f0
