program: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x42}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 79.137818][ T5305] Bluetooth: hci0: command tx timeout [ 79.146302][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.163949][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.328028][ T5320] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 79.331155][ T5320] #PF: supervisor instruction fetch in kernel mode [ 79.333694][ T5320] #PF: error_code(0x0010) - not-present page [ 79.336249][ T5320] PGD 0 P4D 0 [ 79.337737][ T5320] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 79.340206][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 79.345006][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.349695][ T5320] RIP: 0010:0x0 [ 79.351302][ T5320] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 79.354542][ T5320] RSP: 0018:ffffc9000d377998 EFLAGS: 00010287 [ 79.357103][ T5320] RAX: ffffffff81f74be4 RBX: 1ffffd4000265ec8 RCX: 0000000000100000 [ 79.360420][ T5320] RDX: ffffc9000e4a2000 RSI: ffffea000132f640 RDI: ffff88803dfe91c0 [ 79.363877][ T5320] RBP: ffffc9000d377a50 R08: ffffea000132f647 R09: 1ffffd4000265ec8 [ 79.367375][ T5320] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 79.370729][ T5320] R13: ffffea000132f648 R14: ffffea000132f640 R15: 1ffffd4000265ec9 [ 79.374216][ T5320] FS: 00007fe9478556c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 79.378031][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.380284][ T5320] CR2: ffffffffffffffd6 CR3: 000000003e11f000 CR4: 0000000000352ef0 [ 79.383487][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.386733][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.389892][ T5320] Call Trace: [ 79.391329][ T5320] [ 79.392543][ T5320] filemap_read_folio+0x114/0x380 [ 79.394804][ T5320] ? __pfx_filemap_read_folio+0x10/0x10 [ 79.397182][ T5320] ? filemap_add_folio+0x1af/0x270 [ 79.399421][ T5320] do_read_cache_folio+0x354/0x590 [ 79.401378][ T5320] freader_get_folio+0x3c4/0x7f0 [ 79.403391][ T5320] freader_fetch+0xa3/0x5d0 [ 79.405226][ T5320] __build_id_parse+0x133/0x7d0 [ 79.407234][ T5320] ? __pfx___build_id_parse+0x10/0x10 [ 79.409342][ T5320] ? find_vma+0xe7/0x160 [ 79.411335][ T5320] ? __pfx_find_vma+0x10/0x10 [ 79.413460][ T5320] ? query_matching_vma+0x1b2/0x1d0 [ 79.416117][ T5320] procfs_procmap_ioctl+0x7f0/0xce0 [ 79.418466][ T5320] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 79.420966][ T5320] ? __fget_files+0x3a0/0x420 [ 79.423074][ T5320] ? __fget_files+0x2a/0x420 [ 79.425121][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20 [ 79.427117][ T5320] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 79.429547][ T5320] __se_sys_ioctl+0xf9/0x170 [ 79.431580][ T5320] do_syscall_64+0xf6/0x210 [ 79.433419][ T5320] ? clear_bhb_loop+0x45/0xa0 [ 79.435426][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.437968][ T5320] RIP: 0033:0x7fe94698e969 [ 79.439800][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.448828][ T5320] RSP: 002b:00007fe947855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.452536][ T5320] RAX: ffffffffffffffda RBX: 00007fe946bb5fa0 RCX: 00007fe94698e969 [ 79.456090][ T5320] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000a [ 79.459614][ T5320] RBP: 00007fe946a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 79.463785][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.467242][ T5320] R13: 0000000000000000 R14: 00007fe946bb5fa0 R15: 00007fffa57cd0e8 [ 79.470712][ T5320] [ 79.472151][ T5320] Modules linked in: [ 79.473915][ T5320] CR2: 0000000000000000 [ 79.475800][ T5320] ---[ end trace 0000000000000000 ]--- [ 79.478104][ T5320] RIP: 0010:0x0 [ 79.479610][ T5320] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 79.482683][ T5320] RSP: 0018:ffffc9000d377998 EFLAGS: 00010287 [ 79.485142][ T5320] RAX: ffffffff81f74be4 RBX: 1ffffd4000265ec8 RCX: 0000000000100000 [ 79.488393][ T5320] RDX: ffffc9000e4a2000 RSI: ffffea000132f640 RDI: ffff88803dfe91c0 [ 79.491673][ T5320] RBP: ffffc9000d377a50 R08: ffffea000132f647 R09: 1ffffd4000265ec8 [ 79.495001][ T5320] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 79.498334][ T5320] R13: ffffea000132f648 R14: ffffea000132f640 R15: 1ffffd4000265ec9 [ 79.501771][ T5320] FS: 00007fe9478556c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 79.505598][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.508488][ T5320] CR2: ffffffffffffffd6 CR3: 000000003e11f000 CR4: 0000000000352ef0 [ 79.511873][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.515201][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.518658][ T5320] Kernel panic - not syncing: Fatal exception [ 79.521772][ T5320] Kernel Offset: disabled [ 79.523571][ T5320] Rebooting in 86400 seconds..