program: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a310000000005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) [ 85.939975][ T4680] Bluetooth: hci0: command tx timeout [ 85.976554][ T5341] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 85.980595][ T5341] #PF: supervisor instruction fetch in kernel mode [ 85.983314][ T5341] #PF: error_code(0x0010) - not-present page [ 85.985970][ T5341] PGD 0 P4D 0 [ 85.987517][ T5341] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 85.989896][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.998717][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.004950][ T5341] RIP: 0010:0x0 [ 86.006507][ T5341] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 86.009645][ T5341] RSP: 0018:ffffc9000d467998 EFLAGS: 00010287 [ 86.012278][ T5341] RAX: ffffffff81f754e4 RBX: 1ffffd40002642d0 RCX: 0000000000100000 [ 86.015694][ T5341] RDX: ffffc9000dfe2000 RSI: ffffea0001321680 RDI: ffff888031ecb380 [ 86.018834][ T5341] RBP: ffffc9000d467a50 R08: ffffea0001321687 R09: 1ffffd40002642d0 [ 86.021700][ T5341] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.024520][ T5341] R13: ffffea0001321688 R14: ffffea0001321680 R15: 1ffffd40002642d1 [ 86.027346][ T5341] FS: 00007f3ed59946c0(0000) GS:ffff88808d972000(0000) knlGS:0000000000000000 [ 86.030658][ T5341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.033049][ T5341] CR2: ffffffffffffffd6 CR3: 000000003ef83000 CR4: 0000000000352ef0 [ 86.036150][ T5341] Call Trace: [ 86.037510][ T5341] [ 86.038665][ T5341] filemap_read_folio+0x114/0x380 [ 86.040971][ T5341] ? __pfx_filemap_read_folio+0x10/0x10 [ 86.043491][ T5341] ? filemap_add_folio+0x1af/0x270 [ 86.045596][ T5341] do_read_cache_folio+0x350/0x590 [ 86.047330][ T5341] freader_get_folio+0x3c4/0x830 [ 86.049089][ T5341] freader_fetch+0xa3/0x5d0 [ 86.050743][ T5341] __build_id_parse+0x133/0x7d0 [ 86.052764][ T5341] ? __pfx___build_id_parse+0x10/0x10 [ 86.054937][ T5341] ? find_vma+0xe7/0x160 [ 86.056751][ T5341] ? __pfx_find_vma+0x10/0x10 [ 86.058793][ T5341] ? query_matching_vma+0x1b2/0x1d0 [ 86.060664][ T5341] procfs_procmap_ioctl+0x7f0/0xce0 [ 86.062833][ T5341] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 86.065238][ T5341] ? __fget_files+0x2a/0x420 [ 86.067357][ T5341] ? __fget_files+0x2a/0x420 [ 86.069584][ T5341] ? __fget_files+0x3a0/0x420 [ 86.071780][ T5341] ? __fget_files+0x2a/0x420 [ 86.074042][ T5341] ? bpf_lsm_file_ioctl+0x9/0x20 [ 86.076323][ T5341] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 86.078655][ T5341] __se_sys_ioctl+0xf9/0x170 [ 86.080610][ T5341] do_syscall_64+0xfa/0x3b0 [ 86.082365][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.084528][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.086900][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 86.088701][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.091200][ T5341] RIP: 0033:0x7f3ed4b8eec9 [ 86.093138][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.100821][ T5341] RSP: 002b:00007f3ed5994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.103987][ T5341] RAX: ffffffffffffffda RBX: 00007f3ed4de5fa0 RCX: 00007f3ed4b8eec9 [ 86.107321][ T5341] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003 [ 86.110662][ T5341] RBP: 00007f3ed4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.114096][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.117490][ T5341] R13: 00007f3ed4de6038 R14: 00007f3ed4de5fa0 R15: 00007ffc5c68ae88 [ 86.120935][ T5341] [ 86.122313][ T5341] Modules linked in: [ 86.124362][ T5341] CR2: 0000000000000000 [ 86.126300][ T5341] ---[ end trace 0000000000000000 ]--- [ 86.128693][ T5341] RIP: 0010:0x0 [ 86.130234][ T5341] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 86.133383][ T5341] RSP: 0018:ffffc9000d467998 EFLAGS: 00010287 [ 86.135896][ T5341] RAX: ffffffff81f754e4 RBX: 1ffffd40002642d0 RCX: 0000000000100000 [ 86.139234][ T5341] RDX: ffffc9000dfe2000 RSI: ffffea0001321680 RDI: ffff888031ecb380 [ 86.142511][ T5341] RBP: ffffc9000d467a50 R08: ffffea0001321687 R09: 1ffffd40002642d0 [ 86.145933][ T5341] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.149331][ T5341] R13: ffffea0001321688 R14: ffffea0001321680 R15: 1ffffd40002642d1 [ 86.152748][ T5341] FS: 00007f3ed59946c0(0000) GS:ffff88808d972000(0000) knlGS:0000000000000000 [ 86.156561][ T5341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.159540][ T5341] CR2: ffffffffffffffd6 CR3: 000000003ef83000 CR4: 0000000000352ef0 [ 86.163179][ T5341] Kernel panic - not syncing: Fatal exception [ 86.166283][ T5341] Kernel Offset: disabled [ 86.168307][ T5341] Rebooting in 86400 seconds..