BUG: kernel NULL pointer dereference, address: 0000000000000028
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 49258067 P4D 49258067 PUD 6e38e067 PMD 0 
Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 0 PID: 14099 Comm: kworker/0:8 Not tainted 6.9.0-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: slub_flushwq flush_cpu_slab
RIP: 0010:PagePoisoned include/linux/page-flags.h:297 [inline]
RIP: 0010:page_to_nid include/linux/mm.h:1664 [inline]
RIP: 0010:folio_nid include/linux/mm.h:1670 [inline]
RIP: 0010:slab_nid mm/slab.h:194 [inline]
RIP: 0010:deactivate_slab+0x1b/0x3d0 mm/slub.c:2797
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 49 89 f4 53 48 83 e4 f0 48 81 ec b0 00 00 00 <48> 8b 06 48 89 54 24 28 48 83 f8 ff 0f 84 13 03 00 00 48 8b 06 48
RSP: 0018:ffffc9002308fbb0 EFLAGS: 00010282
RAX: 0000000000000006 RBX: ffffe8ffacc1a4a0 RCX: 1ffffffff27afde9
RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff888024d97b80
RBP: ffffc9002308fc90 R08: 0000000000000001 R09: fffffbfff27ad636
R10: ffffffff93d6b1b7 R11: ffffffff81e0bf8a R12: 0000000000000028
R13: 0000000000000028 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88802c200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000028 CR3: 000000005c8ea000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 flush_slab mm/slub.c:3017 [inline]
 flush_cpu_slab+0x141/0x410 mm/slub.c:3063
 process_one_work+0x902/0x1a30 kernel/workqueue.c:3267
 process_scheduled_works kernel/workqueue.c:3348 [inline]
 worker_thread+0x6c8/0xf70 kernel/workqueue.c:3429
 kthread+0x2c1/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
CR2: 0000000000000028
---[ end trace 0000000000000000 ]---
RIP: 0010:PagePoisoned include/linux/page-flags.h:297 [inline]
RIP: 0010:page_to_nid include/linux/mm.h:1664 [inline]
RIP: 0010:folio_nid include/linux/mm.h:1670 [inline]
RIP: 0010:slab_nid mm/slab.h:194 [inline]
RIP: 0010:deactivate_slab+0x1b/0x3d0 mm/slub.c:2797
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 41 54 49 89 f4 53 48 83 e4 f0 48 81 ec b0 00 00 00 <48> 8b 06 48 89 54 24 28 48 83 f8 ff 0f 84 13 03 00 00 48 8b 06 48
RSP: 0018:ffffc9002308fbb0 EFLAGS: 00010282
RAX: 0000000000000006 RBX: ffffe8ffacc1a4a0 RCX: 1ffffffff27afde9
RDX: 0000000000000000 RSI: 0000000000000028 RDI: ffff888024d97b80
RBP: ffffc9002308fc90 R08: 0000000000000001 R09: fffffbfff27ad636
R10: ffffffff93d6b1b7 R11: ffffffff81e0bf8a R12: 0000000000000028
R13: 0000000000000028 R14: 0000000000000000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88802c200000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000028 CR3: 000000005c8ea000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	90                   	nop
   2:	90                   	nop
   3:	90                   	nop
   4:	90                   	nop
   5:	90                   	nop
   6:	90                   	nop
   7:	90                   	nop
   8:	90                   	nop
   9:	90                   	nop
   a:	90                   	nop
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	55                   	push   %rbp
  10:	48 89 e5             	mov    %rsp,%rbp
  13:	41 57                	push   %r15
  15:	41 56                	push   %r14
  17:	41 55                	push   %r13
  19:	41 54                	push   %r12
  1b:	49 89 f4             	mov    %rsi,%r12
  1e:	53                   	push   %rbx
  1f:	48 83 e4 f0          	and    $0xfffffffffffffff0,%rsp
  23:	48 81 ec b0 00 00 00 	sub    $0xb0,%rsp
* 2a:	48 8b 06             	mov    (%rsi),%rax <-- trapping instruction
  2d:	48 89 54 24 28       	mov    %rdx,0x28(%rsp)
  32:	48 83 f8 ff          	cmp    $0xffffffffffffffff,%rax
  36:	0f 84 13 03 00 00    	je     0x34f
  3c:	48 8b 06             	mov    (%rsi),%rax
  3f:	48                   	rex.W