program: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000080, &(0x7f00000001c0)={[{@noload}, {@nombcache}, {@nojournal_checksum}]}, 0x6, 0x4c9, &(0x7f0000002dc0)="$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") r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x40, 0x0, @fixed, 0x1, 0x10}}}, 0xe) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x48574653, 0x1, @discrete={0x33a, 0x741}}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)={0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x4, 0x0, 0x100000, 0x1000, &(0x7f0000004000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000140)={0x1000, 0x11b000}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0xdddd1000, 0x6000, 0x1, 0x25, 0x7f}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x315000}) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) [ 87.677892][ T10] cfg80211: failed to load regulatory.db [ 87.684099][ T5308] Bluetooth: hci0: command tx timeout [ 87.830746][ T5329] loop0: detected capacity change from 0 to 512 [ 87.887103][ T5329] EXT4-fs (loop0): bad geometry: first data block 1 is beyond end of filesystem (0) [ 88.049881][ T5329] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 88.053485][ T5329] #PF: supervisor instruction fetch in kernel mode [ 88.056323][ T5329] #PF: error_code(0x0010) - not-present page [ 88.058936][ T5329] PGD 0 P4D 0 [ 88.060535][ T5329] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 88.062984][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 88.067936][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.072564][ T5329] RIP: 0010:0x0 [ 88.074106][ T5329] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 88.077227][ T5329] RSP: 0018:ffffc9000d297998 EFLAGS: 00010287 [ 88.079914][ T5329] RAX: ffffffff81f853e4 RBX: 1ffffd4000266698 RCX: 0000000000100000 [ 88.083222][ T5329] RDX: ffffc9000e012000 RSI: ffffea00013334c0 RDI: ffff888032bffa80 [ 88.086639][ T5329] RBP: ffffc9000d297a50 R08: ffffea00013334c7 R09: 1ffffd4000266698 [ 88.090004][ T5329] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.093433][ T5329] R13: ffffea00013334c8 R14: ffffea00013334c0 R15: 1ffffd4000266699 [ 88.096821][ T5329] FS: 00007f3342a506c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 88.100767][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.103589][ T5329] CR2: ffffffffffffffd6 CR3: 000000004262c000 CR4: 0000000000352ef0 [ 88.106991][ T5329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.110398][ T5329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.113756][ T5329] Call Trace: [ 88.115249][ T5329] [ 88.116612][ T5329] filemap_read_folio+0x114/0x380 [ 88.118811][ T5329] ? __pfx_filemap_read_folio+0x10/0x10 [ 88.121142][ T5329] ? filemap_add_folio+0x1af/0x270 [ 88.123170][ T5329] do_read_cache_folio+0x350/0x590 [ 88.125191][ T5329] freader_get_folio+0x3c4/0x830 [ 88.127268][ T5329] freader_fetch+0xa3/0x5d0 [ 88.129201][ T5329] __build_id_parse+0x133/0x7d0 [ 88.131323][ T5329] ? __pfx___build_id_parse+0x10/0x10 [ 88.133707][ T5329] ? find_vma+0xe7/0x160 [ 88.135615][ T5329] ? __pfx_find_vma+0x10/0x10 [ 88.137753][ T5329] ? query_matching_vma+0x1b2/0x1d0 [ 88.139949][ T5329] procfs_procmap_ioctl+0x7f0/0xce0 [ 88.142259][ T5329] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 88.144922][ T5329] ? __fget_files+0x2a/0x420 [ 88.147043][ T5329] ? __fget_files+0x2a/0x420 [ 88.149168][ T5329] ? __fget_files+0x3a0/0x420 [ 88.151197][ T5329] ? __fget_files+0x2a/0x420 [ 88.153139][ T5329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.155293][ T5329] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 88.157838][ T5329] __se_sys_ioctl+0xfc/0x170 [ 88.159805][ T5329] do_syscall_64+0xfa/0x3b0 [ 88.161857][ T5329] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.164077][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.166709][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 88.168791][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.171415][ T5329] RIP: 0033:0x7f3341b8e929 [ 88.173330][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.181596][ T5329] RSP: 002b:00007f3342a50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.185240][ T5329] RAX: ffffffffffffffda RBX: 00007f3341db5fa0 RCX: 00007f3341b8e929 [ 88.188769][ T5329] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000b [ 88.192275][ T5329] RBP: 00007f3341c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.195880][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.199454][ T5329] R13: 0000000000000000 R14: 00007f3341db5fa0 R15: 00007ffd49600af8 [ 88.202971][ T5329] [ 88.204381][ T5329] Modules linked in: [ 88.206093][ T5329] CR2: 0000000000000000 [ 88.207874][ T5329] ---[ end trace 0000000000000000 ]--- [ 88.210174][ T5329] RIP: 0010:0x0 [ 88.211708][ T5329] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 88.214975][ T5329] RSP: 0018:ffffc9000d297998 EFLAGS: 00010287 [ 88.217559][ T5329] RAX: ffffffff81f853e4 RBX: 1ffffd4000266698 RCX: 0000000000100000 [ 88.220974][ T5329] RDX: ffffc9000e012000 RSI: ffffea00013334c0 RDI: ffff888032bffa80 [ 88.224452][ T5329] RBP: ffffc9000d297a50 R08: ffffea00013334c7 R09: 1ffffd4000266698 [ 88.227955][ T5329] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.231400][ T5329] R13: ffffea00013334c8 R14: ffffea00013334c0 R15: 1ffffd4000266699 [ 88.234873][ T5329] FS: 00007f3342a506c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 88.238744][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.241666][ T5329] CR2: ffffffffffffffd6 CR3: 000000004262c000 CR4: 0000000000352ef0 [ 88.245223][ T5329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.248750][ T5329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.252097][ T5329] Kernel panic - not syncing: Fatal exception [ 88.254995][ T5329] Kernel Offset: disabled [ 88.256928][ T5329] Rebooting in 86400 seconds..