program: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000001200)=""/4081, 0xff1}], 0x1, 0x101, 0xfffffff9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffaffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000000), 0x4, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r3, &(0x7f0000000700)) [ 86.040665][ T5345] loop0: detected capacity change from 0 to 512 [ 86.085327][ T5345] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.098361][ T5345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.0: bg 0: block 5: invalid block bitmap [ 86.129440][ T5345] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 86.172372][ T5317] Bluetooth: hci0: command tx timeout [ 86.185615][ T5345] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.0: invalid indirect mapped block 3 (level 2) [ 86.192425][ T5345] EXT4-fs (loop0): 1 orphan inode deleted [ 86.194930][ T5345] EXT4-fs (loop0): 1 truncate cleaned up [ 86.199074][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.218489][ T5345] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 86.221746][ T5345] #PF: supervisor instruction fetch in kernel mode [ 86.224548][ T5345] #PF: error_code(0x0010) - not-present page [ 86.227080][ T5345] PGD 0 P4D 0 [ 86.228569][ T5345] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 86.231038][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.234844][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.239439][ T5345] RIP: 0010:0x0 [ 86.240980][ T5345] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 86.244177][ T5345] RSP: 0018:ffffc9000e867958 EFLAGS: 00010287 [ 86.246884][ T5345] RAX: ffffffff81fbd4f4 RBX: 1ffffd40002ad6e0 RCX: 0000000000100000 [ 86.250292][ T5345] RDX: ffffc9002192b000 RSI: ffffea000156b700 RDI: ffff88804423de00 [ 86.253686][ T5345] RBP: ffffc9000e867a18 R08: ffffea000156b707 R09: 1ffffd40002ad6e0 [ 86.257067][ T5345] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.260523][ T5345] R13: ffffea000156b708 R14: ffffea000156b700 R15: 1ffffd40002ad6e1 [ 86.263983][ T5345] FS: 00007fcadd1436c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 86.267826][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.270596][ T5345] CR2: ffffffffffffffd6 CR3: 0000000000d37000 CR4: 0000000000352ef0 [ 86.274058][ T5345] Call Trace: [ 86.275584][ T5345] [ 86.276925][ T5345] filemap_read_folio+0x117/0x380 [ 86.279195][ T5345] ? __pfx_filemap_read_folio+0x10/0x10 [ 86.281635][ T5345] do_read_cache_folio+0x358/0x590 [ 86.283834][ T5345] freader_get_folio+0x3c7/0x830 [ 86.285985][ T5345] freader_fetch+0xa3/0x750 [ 86.287955][ T5345] __build_id_parse+0x133/0x7d0 [ 86.290105][ T5345] ? __pfx___build_id_parse+0x10/0x10 [ 86.292384][ T5345] procfs_procmap_ioctl+0x76f/0xce0 [ 86.294645][ T5345] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 86.297078][ T5345] ? __fget_files+0x2a/0x420 [ 86.299109][ T5345] ? __fget_files+0x2a/0x420 [ 86.301093][ T5345] ? __fget_files+0x3a0/0x420 [ 86.303190][ T5345] ? __fget_files+0x2a/0x420 [ 86.305170][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 86.307305][ T5345] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 86.309729][ T5345] __se_sys_ioctl+0xfc/0x170 [ 86.311803][ T5345] do_syscall_64+0xec/0xf80 [ 86.313794][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.316517][ T5345] ? trace_irq_disable+0x37/0x100 [ 86.318682][ T5345] ? clear_bhb_loop+0x60/0xb0 [ 86.320695][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.323254][ T5345] RIP: 0033:0x7fcadc38f7c9 [ 86.325164][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.333475][ T5345] RSP: 002b:00007fcadd143038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.336802][ T5345] RAX: ffffffffffffffda RBX: 00007fcadc5e6090 RCX: 00007fcadc38f7c9 [ 86.339705][ T5345] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000007 [ 86.342787][ T5345] RBP: 00007fcadc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.345872][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.349296][ T5345] R13: 00007fcadc5e6128 R14: 00007fcadc5e6090 R15: 00007ffe2e3db2b8 [ 86.352696][ T5345] [ 86.354230][ T5345] Modules linked in: [ 86.356339][ T5345] CR2: 0000000000000000 [ 86.358095][ T5345] ---[ end trace 0000000000000000 ]--- [ 86.360441][ T5345] RIP: 0010:0x0 [ 86.361923][ T5345] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 86.364980][ T5345] RSP: 0018:ffffc9000e867958 EFLAGS: 00010287 [ 86.367414][ T5345] RAX: ffffffff81fbd4f4 RBX: 1ffffd40002ad6e0 RCX: 0000000000100000 [ 86.370671][ T5345] RDX: ffffc9002192b000 RSI: ffffea000156b700 RDI: ffff88804423de00 [ 86.373980][ T5345] RBP: ffffc9000e867a18 R08: ffffea000156b707 R09: 1ffffd40002ad6e0 [ 86.377244][ T5345] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.380517][ T5345] R13: ffffea000156b708 R14: ffffea000156b700 R15: 1ffffd40002ad6e1 [ 86.384412][ T5345] FS: 00007fcadd1436c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 86.389047][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.392347][ T5345] CR2: ffffffffffffffd6 CR3: 0000000000d37000 CR4: 0000000000352ef0 [ 86.396480][ T5345] Kernel panic - not syncing: Fatal exception [ 86.399444][ T5345] Kernel Offset: disabled [ 86.401279][ T5345] Rebooting in 86400 seconds..