program: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d598c39}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "b07346e3"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0xb, 0x12, r3, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="bc8ff4f1", 0x4}], 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = socket(0x10, 0x6, 0x2) r6 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='ratelimit_errors,grpquota,direct_io,backgroun\x00\x00\x00\x00mpression=lz4,inline_data,fix_errors=yes,no_data_io,fsck,nocow_enabled,hash,\x00'], 0x1, 0x58dd, &(0x7f0000005900)="$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") syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'macvlan1\x00', {0x4}, 0x6}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x8, 0x0, 0xe4b8, 0x84018, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000, 0x4}, 0x689c, 0x2, 0xe, 0x4, 0x2000000000000001, 0xd, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write(r6, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) [ 86.746489][ T4707] Bluetooth: hci0: command tx timeout [ 86.810457][ T5364] ref_ctr going negative. vaddr: 0x200000fe9002, curr val: -3596, delta: 1 [ 86.821041][ T5364] ref_ctr increment failed for inode: 0x12 offset: 0x0 ref_ctr_offset: 0x2 of mm: 0xffff888011a3eb80 [ 87.129936][ T5364] loop0: detected capacity change from 0 to 32768 [ 87.380858][ T5364] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,grpquota,nojournal_transaction_names [ 87.380879][ T5364] allowing incompatible features above 0.0: (unknown version) [ 87.380886][ T5364] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 87.399055][ T5364] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 87.404491][ T5364] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, shutting down [ 87.404524][ T5364] error not marked as autofix and not in fsck [ 87.404532][ T5364] run fsck, and forward to devs so error can be marked for self-healing [ 87.404540][ T5364] emergency read only at seq 0 [ 87.423091][ T5364] bcachefs (loop0): error in recovery: fsck_errors_not_fixed [ 87.427912][ T5364] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 87.431986][ T5364] bcachefs (loop0): shutting down [ 87.455485][ T5364] bcachefs (loop0): shutdown complete [ 87.988335][ T5364] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 88.151734][ T5364] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 88.155461][ T5364] #PF: supervisor instruction fetch in kernel mode [ 88.158382][ T5364] #PF: error_code(0x0010) - not-present page [ 88.160991][ T5364] PGD 0 P4D 0 [ 88.162572][ T5364] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 88.164979][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.168876][ T5364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.173576][ T5364] RIP: 0010:0x0 [ 88.175280][ T5364] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 88.178206][ T5364] RSP: 0018:ffffc9000d337998 EFLAGS: 00010287 [ 88.180920][ T5364] RAX: ffffffff81f8ec84 RBX: 1ffffd400029d558 RCX: 0000000000100000 [ 88.184595][ T5364] RDX: ffffc9000e292000 RSI: ffffea00014eaac0 RDI: ffff8880336451c0 [ 88.188044][ T5364] RBP: ffffc9000d337a50 R08: ffffea00014eaac7 R09: 1ffffd400029d558 [ 88.191553][ T5364] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.195064][ T5364] R13: ffffea00014eaac8 R14: ffffea00014eaac0 R15: 1ffffd400029d559 [ 88.198593][ T5364] FS: 00007f200c44b6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 88.202908][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.205963][ T5364] CR2: ffffffffffffffd6 CR3: 0000000042e92000 CR4: 0000000000352ef0 [ 88.209515][ T5364] Call Trace: [ 88.211080][ T5364] [ 88.212466][ T5364] filemap_read_folio+0x117/0x380 [ 88.214882][ T5364] ? __pfx_filemap_read_folio+0x10/0x10 [ 88.217434][ T5364] ? filemap_add_folio+0x1af/0x270 [ 88.219873][ T5364] do_read_cache_folio+0x350/0x590 [ 88.222240][ T5364] freader_get_folio+0x3c4/0x830 [ 88.224553][ T5364] freader_fetch+0xa3/0x5d0 [ 88.226722][ T5364] __build_id_parse+0x133/0x7d0 [ 88.228989][ T5364] ? __pfx___build_id_parse+0x10/0x10 [ 88.231318][ T5364] ? find_vma+0xe7/0x160 [ 88.233323][ T5364] ? __pfx_find_vma+0x10/0x10 [ 88.235502][ T5364] ? query_matching_vma+0x1b2/0x1d0 [ 88.237999][ T5364] procfs_procmap_ioctl+0x7f0/0xce0 [ 88.240381][ T5364] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 88.243030][ T5364] ? __fget_files+0x2a/0x420 [ 88.245188][ T5364] ? __fget_files+0x2a/0x420 [ 88.247403][ T5364] ? __fget_files+0x3a0/0x420 [ 88.249521][ T5364] ? __fget_files+0x2a/0x420 [ 88.251562][ T5364] ? bpf_lsm_file_ioctl+0x9/0x20 [ 88.253779][ T5364] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 88.256327][ T5364] __se_sys_ioctl+0xf9/0x170 [ 88.258377][ T5364] do_syscall_64+0xfa/0x3b0 [ 88.260572][ T5364] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.263036][ T5364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.265810][ T5364] ? clear_bhb_loop+0x60/0xb0 [ 88.268076][ T5364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.270825][ T5364] RIP: 0033:0x7f200b58eec9 [ 88.272903][ T5364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.281527][ T5364] RSP: 002b:00007f200c44b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.285359][ T5364] RAX: ffffffffffffffda RBX: 00007f200b7e5fa0 RCX: 00007f200b58eec9 [ 88.288900][ T5364] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 000000000000000a [ 88.292465][ T5364] RBP: 00007f200b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.295761][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.299087][ T5364] R13: 00007f200b7e6038 R14: 00007f200b7e5fa0 R15: 00007fffe1e35d88 [ 88.302820][ T5364] [ 88.304259][ T5364] Modules linked in: [ 88.305922][ T5364] CR2: 0000000000000000 [ 88.307756][ T5364] ---[ end trace 0000000000000000 ]--- [ 88.310467][ T5364] RIP: 0010:0x0 [ 88.316873][ T5364] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 88.320150][ T5364] RSP: 0018:ffffc9000d337998 EFLAGS: 00010287 [ 88.322783][ T5364] RAX: ffffffff81f8ec84 RBX: 1ffffd400029d558 RCX: 0000000000100000 [ 88.326347][ T5364] RDX: ffffc9000e292000 RSI: ffffea00014eaac0 RDI: ffff8880336451c0 [ 88.329604][ T5364] RBP: ffffc9000d337a50 R08: ffffea00014eaac7 R09: 1ffffd400029d558 [ 88.333090][ T5364] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 88.336663][ T5364] R13: ffffea00014eaac8 R14: ffffea00014eaac0 R15: 1ffffd400029d559 [ 88.340345][ T5364] FS: 00007f200c44b6c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 88.344311][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.347349][ T5364] CR2: ffffffffffffffd6 CR3: 0000000042e92000 CR4: 0000000000352ef0 [ 88.350999][ T5364] Kernel panic - not syncing: Fatal exception [ 88.354277][ T5364] Kernel Offset: disabled [ 88.356060][ T5364] Rebooting in 86400 seconds..