Extracting prog: 2m30.652232994s
Minimizing prog: 49m23.494358007s
Simplifying prog options: 0s
Extracting C: 34.886638869s
Simplifying C: 11m19.191237757s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto-write$auto-fsopen$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9)
fsopen$auto(&(0x7f0000000080)='\x00', 0x9)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
single: successfully extracted reproducer
found reproducer with 26 syscalls
minimizing guilty program
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)
write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health-write$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/health/break_health\x00', 0x48081, 0x0)
write$auto(r5, &(0x7f0000005900)='\x00', 0x6)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm-openat$auto_nsim_dev_health_break_fops_health
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)
openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/health/break_health\x00', 0x48081, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto-openat$auto_snd_pcm_f_ops_pcm
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE-sysfs$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)
sysfs$auto(0x2, 0x11, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto-ioctl$auto_FIDEDUPERANGE
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x8000)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES-writev$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000080))
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net-ioctl$auto_VHOST_SET_BACKEND_FEATURES
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000080))

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base-openat$auto_vhost_net_fops_net
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154-openat$auto_proc_fail_nth_operations_base
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x402541, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto-syz_genetlink_get_family_id$auto_nl802154
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto-mmap$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto-read$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x20)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode-poll$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)
poll$auto(&(0x7f0000000200)={r2, 0x9, 0x3}, 0x3, 0x3)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev-openat$auto_media_devnode_fops_mc_devnode
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media3\x00', 0x40000, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto-openat$auto_i2cdev_fops_i2c_dev
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x511200, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG-sendmmsg$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY-sendmsg$auto_NL80211_CMD_GET_REG
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000)

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-openat$auto_proc_pid_maps_operations_internal
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)

program did not crash
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-sendmsg$auto_NETDEV_CMD_QUEUE_GET-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002", @ANYRES32=r0, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program did not crash
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-sendmsg$auto_NL80211_CMD_GET_REG-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-socket-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program did not crash
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program did not crash
testing program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45.754221654s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
simplifying C reproducer
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing compiled C program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
testing program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
validation run: crashed=true
testing program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
validation run: crashed=true
testing program (duration=45.754221654s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-openat$auto_proc_pid_maps_operations_internal-ioctl$auto_PROCMAP_QUERY
detailed listing:
executing program 0:
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2})

program crashed: BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio
validation run: crashed=true
reproducing took 1h10m15.02919101s
repro crashed as (corrupted=false):
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 800000002829f067 P4D 800000002829f067 PUD 0 
Oops: Oops: 0010 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 6063 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc9000421f9a0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3c60e
RDX: ffff88807915bc80 RSI: ffffea00018a5740 RDI: ffff888029cfa540
RBP: ffffea00018a5740 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000843f35
R13: ffff888029cfa540 R14: 0000000000000000 R15: dffffc0000000000
FS:  00005555791fd500(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000075bbc000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 filemap_read_folio+0xc8/0x2a0 mm/filemap.c:2444
 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:4024
 freader_get_folio+0x337/0x930 lib/buildid.c:77
 freader_fetch+0xc2/0x5e0 lib/buildid.c:120
 __build_id_parse.isra.0+0xec/0x7a0 lib/buildid.c:305
 do_procmap_query+0xb0e/0x1080 fs/proc/task_mmu.c:733
 procfs_procmap_ioctl+0x9d/0xe0 fs/proc/task_mmu.c:813
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb9ef38f6c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffeceb5a358 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fb9ef5e5fa0 RCX: 00007fb9ef38f6c9
RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003
RBP: 00007fb9ef411f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb9ef5e5fa0 R14: 00007fb9ef5e5fa0 R15: 0000000000000003
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc9000421f9a0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3c60e
RDX: ffff88807915bc80 RSI: ffffea00018a5740 RDI: ffff888029cfa540
RBP: ffffea00018a5740 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000843f35
R13: ffff888029cfa540 R14: 0000000000000000 R15: dffffc0000000000
FS:  00005555791fd500(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000075bbc000 CR4: 00000000003526f0

final repro crashed as (corrupted=false):
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 800000002829f067 P4D 800000002829f067 PUD 0 
Oops: Oops: 0010 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 6063 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc9000421f9a0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3c60e
RDX: ffff88807915bc80 RSI: ffffea00018a5740 RDI: ffff888029cfa540
RBP: ffffea00018a5740 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000843f35
R13: ffff888029cfa540 R14: 0000000000000000 R15: dffffc0000000000
FS:  00005555791fd500(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000075bbc000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 filemap_read_folio+0xc8/0x2a0 mm/filemap.c:2444
 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:4024
 freader_get_folio+0x337/0x930 lib/buildid.c:77
 freader_fetch+0xc2/0x5e0 lib/buildid.c:120
 __build_id_parse.isra.0+0xec/0x7a0 lib/buildid.c:305
 do_procmap_query+0xb0e/0x1080 fs/proc/task_mmu.c:733
 procfs_procmap_ioctl+0x9d/0xe0 fs/proc/task_mmu.c:813
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fb9ef38f6c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffeceb5a358 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fb9ef5e5fa0 RCX: 00007fb9ef38f6c9
RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000003
RBP: 00007fb9ef411f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fb9ef5e5fa0 R14: 00007fb9ef5e5fa0 R15: 0000000000000003
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffffc9000421f9a0 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81f3c60e
RDX: ffff88807915bc80 RSI: ffffea00018a5740 RDI: ffff888029cfa540
RBP: ffffea00018a5740 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000843f35
R13: ffff888029cfa540 R14: 0000000000000000 R15: dffffc0000000000
FS:  00005555791fd500(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000075bbc000 CR4: 00000000003526f0