program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup2(r0, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)

[   74.952782][ T5324] Bluetooth: hci0: command tx timeout
[   74.997792][ T5340] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[   75.002684][ T5340] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[   75.006151][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-12245-g91e5bfe317d8 #0 PREEMPT(full) 
[   75.010811][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.015059][ T5340] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00
[   75.017459][ T5340] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 28 0e ab ff 85 db 0f 84 7b 01 00 00 e8 1b 0b ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 26 2f 15 00 4c 8b 34 25 20 00
[   75.024812][ T5340] RSP: 0018:ffffc9000d457b40 EFLAGS: 00010246
[   75.027204][ T5340] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92001a8afca
[   75.030346][ T5340] RDX: ffffc9000e402000 RSI: 00000000000000b0 RDI: 00000000000000b1
[   75.033415][ T5340] RBP: ffffc9000d457f00 R08: ffffffff821d1f14 R09: ffffffff8c26d057
[   75.036238][ T5340] R10: 0000000000000004 R11: ffff88801f60a440 R12: 0000200000ffc000
[   75.038979][ T5340] R13: ffff88801eca3500 R14: 0000000018000098 R15: ffffc9000d457cd0
[   75.041897][ T5340] FS:  00007fcbd016e6c0(0000) GS:ffff88808c59c000(0000) knlGS:0000000000000000
[   75.045188][ T5340] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.047644][ T5340] CR2: 00007fcbcf598570 CR3: 00000000438d8000 CR4: 0000000000352ef0
[   75.050781][ T5340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.053822][ T5340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.057038][ T5340] Call Trace:
[   75.058426][ T5340]  <TASK>
[   75.059694][ T5340]  ? __pfx___se_sys_mremap+0x10/0x10
[   75.061864][ T5340]  ? rcu_is_watching+0x15/0xb0
[   75.063901][ T5340]  ? __rseq_handle_notify_resume+0x3c8/0x15d0
[   75.066398][ T5340]  ? __x64_sys_mremap+0x20/0xc0
[   75.068316][ T5340]  do_syscall_64+0xf3/0x230
[   75.070133][ T5340]  ? clear_bhb_loop+0x45/0xa0
[   75.072088][ T5340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.074505][ T5340] RIP: 0033:0x7fcbcf38d169
[   75.076157][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.083506][ T5340] RSP: 002b:00007fcbd016e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   75.086620][ T5340] RAX: ffffffffffffffda RBX: 00007fcbcf5a5fa0 RCX: 00007fcbcf38d169
[   75.089314][ T5340] RDX: 0000000000003000 RSI: 0000000000001000 RDI: 0000200000ffc000
[   75.092633][ T5340] RBP: 00007fcbcf40e2a0 R08: 0000200000ffd000 R09: 0000000000000000
[   75.095954][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.099227][ T5340] R13: 0000000000000000 R14: 00007fcbcf5a5fa0 R15: 00007ffcba9f7d38
[   75.102357][ T5340]  </TASK>
[   75.103643][ T5340] Modules linked in:
[   75.105714][ T5340] ---[ end trace 0000000000000000 ]---
[   75.122030][ T5340] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00
[   75.125529][ T5340] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 28 0e ab ff 85 db 0f 84 7b 01 00 00 e8 1b 0b ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 26 2f 15 00 4c 8b 34 25 20 00
[   75.133300][ T5340] RSP: 0018:ffffc9000d457b40 EFLAGS: 00010246
[   75.136644][ T5340] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92001a8afca
[   75.139684][ T5340] RDX: ffffc9000e402000 RSI: 00000000000000b0 RDI: 00000000000000b1
[   75.142668][ T5340] RBP: ffffc9000d457f00 R08: ffffffff821d1f14 R09: ffffffff8c26d057
[   75.146998][ T5340] R10: 0000000000000004 R11: ffff88801f60a440 R12: 0000200000ffc000
[   75.150131][ T5340] R13: ffff88801eca3500 R14: 0000000018000098 R15: ffffc9000d457cd0
[   75.153238][ T5340] FS:  00007fcbd016e6c0(0000) GS:ffff88808c59c000(0000) knlGS:0000000000000000
[   75.157386][ T5340] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.160129][ T5340] CR2: 00007fcbcf57d538 CR3: 00000000438d8000 CR4: 0000000000352ef0
[   75.163422][ T5340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.167666][ T5340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.170992][ T5340] Kernel panic - not syncing: Fatal exception
[   75.173585][ T5340] Kernel Offset: disabled
[   75.175388][ T5340] Rebooting in 86400 seconds..