program: syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x78}, "af1ab0c628fee622f1b250b6cdbb80826112332d8abd2cd08cdc90fb633cc9b0e74eb8a4c0d740d633abfe663f0d56c16104a53a3a5791426072728d4631f9f7e04b7b3a076d247da409f502908b80d0b491f07938d3d0cc2887f656d012b102e08d7d3ee5dd932e97f6dec24f2269d401660c7b9ac12d6d"}, 0x7c) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, r0, &(0x7f00000000c0)={0x9, 0x18008000000, 0x9, 0x6, 0xc, 0x156, 0x83, 0x3, 0x465}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x222800f, &(0x7f0000000340)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_appraise}]}, 0xfe, 0x4fb, &(0x7f0000000880)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) readlinkat(r1, &(0x7f0000000240)='./file2\x00', &(0x7f00000003c0)=""/216, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4d810}, 0x4085) [ 77.044924][ T4701] Bluetooth: hci0: command tx timeout [ 77.049782][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.052623][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.132181][ T5353] loop0: detected capacity change from 0 to 512 [ 77.154672][ T5353] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 77.158102][ T5353] #PF: supervisor instruction fetch in kernel mode [ 77.160978][ T5353] #PF: error_code(0x0010) - not-present page [ 77.163655][ T5353] PGD 0 P4D 0 [ 77.165200][ T5353] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 77.167633][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.171529][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.176164][ T5353] RIP: 0010:0x0 [ 77.177723][ T5353] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 77.180926][ T5353] RSP: 0018:ffffc9000d43f998 EFLAGS: 00010287 [ 77.183568][ T5353] RAX: ffffffff81f8f8b4 RBX: 1ffffd4000267058 RCX: 0000000000100000 [ 77.187020][ T5353] RDX: ffffc9000dd92000 RSI: ffffea00013382c0 RDI: ffff88803474f8c0 [ 77.190479][ T5353] RBP: ffffc9000d43fa50 R08: ffffea00013382c7 R09: 1ffffd4000267058 [ 77.193883][ T5353] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 77.197371][ T5353] R13: ffffea00013382c8 R14: ffffea00013382c0 R15: 1ffffd4000267059 [ 77.200794][ T5353] FS: 00007fc4215f56c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 77.204547][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.207366][ T5353] CR2: ffffffffffffffd6 CR3: 0000000032db7000 CR4: 0000000000352ef0 [ 77.210810][ T5353] Call Trace: [ 77.212185][ T5353] [ 77.213387][ T5353] filemap_read_folio+0x117/0x380 [ 77.215559][ T5353] ? __pfx_filemap_read_folio+0x10/0x10 [ 77.217770][ T5353] ? filemap_add_folio+0x1af/0x270 [ 77.219834][ T5353] do_read_cache_folio+0x350/0x590 [ 77.221900][ T5353] freader_get_folio+0x3c4/0x830 [ 77.223935][ T5353] freader_fetch+0xa3/0x5d0 [ 77.225868][ T5353] __build_id_parse+0x133/0x7d0 [ 77.227964][ T5353] ? __pfx___build_id_parse+0x10/0x10 [ 77.230223][ T5353] ? find_vma+0xe7/0x160 [ 77.232014][ T5353] ? __pfx_find_vma+0x10/0x10 [ 77.234097][ T5353] ? query_matching_vma+0x1b2/0x1d0 [ 77.236307][ T5353] procfs_procmap_ioctl+0x7f0/0xce0 [ 77.238459][ T5353] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 77.240818][ T5353] ? __fget_files+0x2a/0x420 [ 77.242792][ T5353] ? __fget_files+0x2a/0x420 [ 77.244735][ T5353] ? __fget_files+0x3a0/0x420 [ 77.246807][ T5353] ? __fget_files+0x2a/0x420 [ 77.248798][ T5353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 77.250986][ T5353] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 77.253441][ T5353] __se_sys_ioctl+0xfc/0x170 [ 77.255470][ T5353] do_syscall_64+0xfa/0x3b0 [ 77.257438][ T5353] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.259680][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.262251][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 77.264324][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.266848][ T5353] RIP: 0033:0x7fc42518eec9 [ 77.268713][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.276774][ T5353] RSP: 002b:00007fc4215f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.280127][ T5353] RAX: ffffffffffffffda RBX: 00007fc4253e5fa0 RCX: 00007fc42518eec9 [ 77.283498][ T5353] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 77.286851][ T5353] RBP: 00007fc425211f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.290224][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.293608][ T5353] R13: 00007fc4253e6038 R14: 00007fc4253e5fa0 R15: 00007ffd39cc29a8 [ 77.297045][ T5353] [ 77.298444][ T5353] Modules linked in: [ 77.300187][ T5353] CR2: 0000000000000000 [ 77.302077][ T5353] ---[ end trace 0000000000000000 ]--- [ 77.304432][ T5353] RIP: 0010:0x0 [ 77.306017][ T5353] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 77.309269][ T5353] RSP: 0018:ffffc9000d43f998 EFLAGS: 00010287 [ 77.311899][ T5353] RAX: ffffffff81f8f8b4 RBX: 1ffffd4000267058 RCX: 0000000000100000 [ 77.315196][ T5353] RDX: ffffc9000dd92000 RSI: ffffea00013382c0 RDI: ffff88803474f8c0 [ 77.318523][ T5353] RBP: ffffc9000d43fa50 R08: ffffea00013382c7 R09: 1ffffd4000267058 [ 77.321757][ T5353] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 77.325036][ T5353] R13: ffffea00013382c8 R14: ffffea00013382c0 R15: 1ffffd4000267059 [ 77.328354][ T5353] FS: 00007fc4215f56c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 77.332144][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.334966][ T5353] CR2: ffffffffffffffd6 CR3: 0000000032db7000 CR4: 0000000000352ef0 [ 77.338324][ T5353] Kernel panic - not syncing: Fatal exception [ 77.341243][ T5353] Kernel Offset: disabled [ 77.343155][ T5353] Rebooting in 86400 seconds..