program: syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000080, &(0x7f00000001c0)={[{@noload}, {@nombcache}, {@nojournal_checksum}]}, 0x6, 0x4c9, &(0x7f0000002dc0)="$eJzs3c9vFNcdAPDv7GKwjVt+tIfCAVBBoi3CC7awrYoLp0qVaCs49Ihce7Go117Lu6bY8sFIPbT3qkHKKcqBPyBKruGUI8ot4ZScI6HEMbEiBWmjnd01xvY6m8R4Jc/nI43mzRtrvu959X07+3ZmJ4DMOtdcD0TE04g41th8UqvVaht/cK6xWl9dnqgvSdRqt79MIomItdXlidaxkub6aESsRERvRNz6U8Q/ku1xK4tL0+OlUnG+uV2ozswVKotLl+/NjE8Vp4qzw6NDo2MjI6Nj1/asr/9+cOOv///mxn/e/eTxZ/9M3r+QNPsdcf7Mx4VX/dhLja73xIlNdYci4vqbCNYF+WZ/+rrdEH6S+uv3q3oGpPl/LPLpqwlkQf19/mXtSLvdKzXgwMql58BJbjAiGuVcbnCwcQ7/6+jPlcqV6qW75YXZyca58vHoyd29VypeaX5WOB49SX37alp+tT0UEQ83bQ9HpOfA/8v3pduDE+XS5P4OdcAWR7fk/4t8I/+BjPCRH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXY38P9ztZgBd4P0fskv+Qyb97ebN+lJbb97HP3l/cWG6fP/yZLEyPTizMDE4UZ6fG5wql6fSe3Zmfuh4pXJ5bjhmFx4UqsVKtVBZXLozU16Yrd5J7+u/U+zZl14BnThx9smzJCJW/tiXLrFpIkCuwsFWqyXR7XuQge7Id3sAArrG1B9kl8/4wA4/0fua3nY75va+LcD+yHW7AUDXXDzl+z/Iqh8x/7/yJtsB7D/z/5BdzvEB8/+QPeb/IbsG2jz/6xebnt11JSJ+GRGf5nuOtJ71BRwEuS+S5vn/xWMXBrbuPZx8m35FcDgi/vX27bcejFer81fr9V9t1FcfNeuHutF+oFOtPG3lMQCQXWuryxOtpVHTdsZ/Tz2/0bgIoR53vbk09hxqzk32pt9R9q8lr12rkOzRtQsrDyPiNxEvVpcnWksrQuN5543/Q/9aflv8k8110jhE2t5D6XPT9yf+qU3xz2yKf/pn/1cgG57Ux58rO41/uTSnYyP/Xh9/Bvbo2onW+Le+bfzLbYx/+Tbj39kOY1wv/H2tbfyHEad3jN+K15vG2hq/3raLHcb/6L9fP223r/ZO4zg7xW+plwrVmblCZXHpcvo7clPF2eHRodGxkZHRsWuFdI660Jqp3u7Zb19+uFv/+9vE363/9brfd9j/7x59cOncLvF/d37n1//kLvH7IuIPHcb/83uf32q3rx5/sk3/c7vEr9cNdxj/9uPnf+nwTwGAfVBZXJoeL5WK8woKCgobhW6PTMCb9irpu90SAAAAAAAAAAAAoFP7cTlxt/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAQfB8AAP//VhLdIg==") (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xbe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12063, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}, 0x2086, 0x8, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',nojoliet,hide,mode=0x0000000000000007,overriderockperm,utf8,\x00'], 0x0, 0x56a, &(0x7f0000000200)="$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") (async) write$binfmt_script(r2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000008c0)={0x0, 0x7f, 0x7f, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000cc0)={r3, 0x100000001, 0x8}) (async) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) [ 76.318374][ T46] Bluetooth: hci0: command tx timeout [ 76.422398][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.425413][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.438664][ T5341] loop0: detected capacity change from 0 to 512 [ 76.442895][ T5342] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 76.446194][ T5342] #PF: supervisor instruction fetch in kernel mode [ 76.448957][ T5342] #PF: error_code(0x0010) - not-present page [ 76.451575][ T5342] PGD 0 P4D 0 [ 76.453096][ T5342] Oops: Oops: 0010 [#1] SMP KASAN NOPTI [ 76.455551][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.459330][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.463885][ T5342] RIP: 0010:0x0 [ 76.465403][ T5342] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 76.468694][ T5342] RSP: 0018:ffffc9000b6ff958 EFLAGS: 00010293 [ 76.471376][ T5342] RAX: ffffffff81fbd4f4 RBX: 1ffffd4000091900 RCX: ffff8880008ca4c0 [ 76.474849][ T5342] RDX: 0000000000000000 RSI: ffffea000048c800 RDI: ffff888011453540 [ 76.478054][ T5342] RBP: ffffc9000b6ffa18 R08: ffffea000048c807 R09: 1ffffd4000091900 [ 76.481440][ T5342] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 76.484786][ T5342] R13: ffffea000048c808 R14: ffffea000048c800 R15: 1ffffd4000091901 [ 76.487912][ T5342] FS: 00007f687e9d46c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 76.491700][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.494598][ T5342] CR2: ffffffffffffffd6 CR3: 0000000011ad2000 CR4: 0000000000352ef0 [ 76.498032][ T5342] Call Trace: [ 76.499622][ T5342] [ 76.500927][ T5342] filemap_read_folio+0x117/0x380 [ 76.503401][ T5342] ? __pfx_filemap_read_folio+0x10/0x10 [ 76.505881][ T5342] do_read_cache_folio+0x358/0x590 [ 76.508117][ T5342] freader_get_folio+0x3c7/0x830 [ 76.510533][ T5342] freader_fetch+0xa3/0x750 [ 76.512772][ T5342] __build_id_parse+0x133/0x7d0 [ 76.515031][ T5342] ? __pfx___build_id_parse+0x10/0x10 [ 76.517477][ T5342] procfs_procmap_ioctl+0x76f/0xce0 [ 76.519744][ T5342] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 76.522240][ T5342] ? __fget_files+0x2a/0x420 [ 76.524201][ T5342] ? __fget_files+0x2a/0x420 [ 76.526164][ T5342] ? __fget_files+0x3a0/0x420 [ 76.528278][ T5342] ? __fget_files+0x2a/0x420 [ 76.530330][ T5342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 76.532399][ T5342] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 76.534891][ T5342] __se_sys_ioctl+0xfc/0x170 [ 76.536858][ T5342] do_syscall_64+0xec/0xf80 [ 76.538842][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.541366][ T5342] ? trace_irq_disable+0x37/0x100 [ 76.543389][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 76.545307][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.547734][ T5342] RIP: 0033:0x7f688258f7c9 [ 76.549528][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.557419][ T5342] RSP: 002b:00007f687e9d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.561192][ T5342] RAX: ffffffffffffffda RBX: 00007f68827e6090 RCX: 00007f688258f7c9 [ 76.564613][ T5342] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000005 [ 76.567991][ T5342] RBP: 00007f6882613f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.571404][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.574651][ T5342] R13: 00007f68827e6128 R14: 00007f68827e6090 R15: 00007ffd54134f78 [ 76.578030][ T5342] [ 76.580048][ T5342] Modules linked in: [ 76.581878][ T5342] CR2: 0000000000000000 [ 76.583961][ T5342] ---[ end trace 0000000000000000 ]--- [ 76.586467][ T5342] RIP: 0010:0x0 [ 76.588263][ T5342] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 76.591510][ T5342] RSP: 0018:ffffc9000b6ff958 EFLAGS: 00010293 [ 76.594263][ T5342] RAX: ffffffff81fbd4f4 RBX: 1ffffd4000091900 RCX: ffff8880008ca4c0 [ 76.597894][ T5342] RDX: 0000000000000000 RSI: ffffea000048c800 RDI: ffff888011453540 [ 76.601238][ T5342] RBP: ffffc9000b6ffa18 R08: ffffea000048c807 R09: 1ffffd4000091900 [ 76.604750][ T5342] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 76.607954][ T5342] R13: ffffea000048c808 R14: ffffea000048c800 R15: 1ffffd4000091901 [ 76.611157][ T5342] FS: 00007f687e9d46c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 76.614835][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.617648][ T5342] CR2: ffffffffffffffd6 CR3: 0000000011ad2000 CR4: 0000000000352ef0 [ 76.621072][ T5342] Kernel panic - not syncing: Fatal exception [ 76.624265][ T5342] Kernel Offset: disabled [ 76.626298][ T5342] Rebooting in 86400 seconds..