BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 3e863067 P4D 3e863067 PUD 4aeb3067 PMD 0 
Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15333 Comm: syz-executor.3 Not tainted 6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b3aa700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000001f8ce000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe88de34b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe88b3aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fe88df47f60 RCX: 00007fe88de34b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fe88de8ef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffeeffa1ef R14: 00007fe88b3aa300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b3aa700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000001f8ce000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.3[15333] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 3e863067 P4D 3e863067 PUD 4aeb3067 PMD 0 
Oops: 0010 [#2] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15350 Comm: syz-executor.3 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888048d4f630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00010b50c0 RCX: ffffffff8161fd5c
RDX: fffff94000216a19 RSI: ffffea00010b50c0 RDI: ffff888015924000
RBP: ffff888015924000 R08: 0000000000000001 R09: ffffea00010b50c7
R10: fffff94000216a18 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00010b50c0 R14: ffff888040b2ece8 R15: ffff888040b2ed80
FS:  00007fe88b389700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000001f8ce000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe88de34b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe88b389188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fe88df48020 RCX: 00007fe88de34b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fe88de8ef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffeeffa1ef R14: 00007fe88b389300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b389700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000001f8ce000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.3[15350] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 3fc09067 P4D 3fc09067 PUD 3fc0c067 PMD 0 
Oops: 0010 [#3] PREEMPT SMP KASAN NOPTI
CPU: 0 PID: 15372 Comm: syz-executor.3 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff88804133f630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea0001260840 RCX: ffffffff8161fd5c
RDX: fffff9400024c109 RSI: ffffea0001260840 RDI: ffff88800dc15680
RBP: ffff88800dc15680 R08: 0000000000000001 R09: ffffea0001260847
R10: fffff9400024c108 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea0001260840 R14: ffff88803ff27318 R15: ffff88803ff273b0
FS:  00007fe88b3aa700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000003fa1c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe88de34b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe88b3aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fe88df47f60 RCX: 00007fe88de34b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fe88de8ef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffeeffa1ef R14: 00007fe88b3aa300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b3aa700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000003fa1c000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.3[15372] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 40a60067 P4D 40a60067 PUD 41555067 PMD 0 
Oops: 0010 [#4] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15404 Comm: syz-executor.6 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff8880415a7630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea000111dcc0 RCX: ffffffff8161fd5c
RDX: fffff94000223b99 RSI: ffffea000111dcc0 RDI: ffff88800e29a280
RBP: ffff88800e29a280 R08: 0000000000000001 R09: ffffea000111dcc7
R10: fffff94000223b98 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea000111dcc0 R14: ffff888040b29c78 R15: ffff888040b29d10
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000004b02e000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fc1856c2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc182c38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fc1857d5f60 RCX: 00007fc1856c2b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fc18571cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdca94f80f R14: 00007fc182c38300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
BUG: kernel NULL pointer dereference, address: 0000000000000000
RIP: 0010:0x0
#PF: supervisor instruction fetch in kernel mode
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
#PF: error_code(0x0010) - not-present page
RSP: 0018:ffff888040927630 EFLAGS: 00010246
PGD 38fff067 P4D 38fff067 

RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
PUD 411fe067 
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
PMD 0 
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7

Oops: 0010 [#5] PREEMPT SMP KASAN NOPTI
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
CPU: 0 PID: 15408 Comm: syz-executor.3 Tainted: G      D            6.2.0-rc8-next-20230214 #1
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
RIP: 0010:0x0
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
CR2: ffffffffffffffd6 CR3: 000000004b02e000 CR4: 0000000000350ee0
RSP: 0018:ffff88804a46f630 EFLAGS: 00010246
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000

RAX: 0000000000000001 RBX: ffffea00010f7600 RCX: ffffffff8161fd5c
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
RDX: fffff9400021eec1 RSI: ffffea00010f7600 RDI: ffff88800cc0b900
note: syz-executor.6[15404] exited with irqs disabled
RBP: ffff88800cc0b900 R08: 0000000000000001 R09: ffffea00010f7607
R10: fffff9400021eec0 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00010f7600 R14: ffff8880411122a8 R15: ffff888041112340
FS:  00007fe88b3aa700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000004831e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe88de34b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe88b3aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fe88df47f60 RCX: 00007fe88de34b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fe88de8ef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffeeffa1ef R14: 00007fe88b3aa300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b3aa700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000004831e000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.3[15408] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 486bf067 P4D 486bf067 PUD 40887067 PMD 0 
Oops: 0010 [#6] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15447 Comm: syz-executor.6 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888048657630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea0001114280 RCX: ffffffff8161fd5c
RDX: fffff94000222851 RSI: ffffea0001114280 RDI: ffff88800e29aa00
RBP: ffff88800e29aa00 R08: 0000000000000001 R09: ffffea0001114287
R10: fffff94000222850 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea0001114280 R14: ffff888040b2b538 R15: ffff888040b2b5d0
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000003eb7e000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fc1856c2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc182c38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fc1857d5f60 RCX: 00007fc1856c2b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fc18571cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdca94f80f R14: 00007fc182c38300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 000000003eb7e000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.6[15447] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD ecdf067 P4D ecdf067 PUD 4c0e4067 PMD 0 
Oops: 0010 [#7] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15449 Comm: syz-executor.3 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff88801636f630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011147c0 RCX: ffffffff8161fd5c
RDX: fffff940002228f9 RSI: ffffea00011147c0 RDI: ffff8880489ff180
RBP: ffff8880489ff180 R08: 0000000000000001 R09: ffffea00011147c7
R10: fffff940002228f8 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011147c0 R14: ffff888040b2a8d8 R15: ffff888040b2a970
FS:  00007fe88b3aa700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000487fc000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fe88de34b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe88b3aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fe88df47f60 RCX: 00007fe88de34b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fe88de8ef6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffeeffa1ef R14: 00007fe88b3aa300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fe88b3aa700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 00000000487fc000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.3[15449] exited with irqs disabled
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor instruction fetch in kernel mode
#PF: error_code(0x0010) - not-present page
PGD 484da067 P4D 484da067 PUD 40530067 PMD 0 
Oops: 0010 [#8] PREEMPT SMP KASAN NOPTI
CPU: 1 PID: 15486 Comm: syz-executor.6 Tainted: G      D            6.2.0-rc8-next-20230214 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888048f87630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea000126dec0 RCX: ffffffff8161fd5c
RDX: fffff9400024dbd9 RSI: ffffea000126dec0 RDI: ffff88801996b680
RBP: ffff88801996b680 R08: 0000000000000001 R09: ffffea000126dec7
R10: fffff9400024dbd8 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea000126dec0 R14: ffff888016887318 R15: ffff8880168873b0
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000041770000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 filemap_read_folio+0x5c/0x1f0
 filemap_get_pages+0x46f/0x1560
 generic_file_buffered_splice_read.constprop.0+0x2ce/0xcf0
 generic_file_splice_read+0x198/0xb70
 do_splice_to+0x1bc/0x240
 splice_direct_to_actor+0x2b0/0x8c0
 do_splice_direct+0x1bc/0x290
 do_sendfile+0xb1d/0x12b0
 __x64_sys_sendfile64+0x1d5/0x210
 do_syscall_64+0x3f/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc
RIP: 0033:0x7fc1856c2b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fc182c38188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007fc1857d5f60 RCX: 00007fc1856c2b19
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
RBP: 00007fc18571cf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdca94f80f R14: 00007fc182c38300 R15: 0000000000022000
 </TASK>
Modules linked in:
CR2: 0000000000000000
---[ end trace 0000000000000000 ]---
RIP: 0010:0x0
Code: Unable to access opcode bytes at 0xffffffffffffffd6.
RSP: 0018:ffff888040927630 EFLAGS: 00010246
RAX: 0000000000000001 RBX: ffffea00011144c0 RCX: ffffffff8161fd5c
RDX: fffff94000222899 RSI: ffffea00011144c0 RDI: ffff88800d98b400
RBP: ffff88800d98b400 R08: 0000000000000001 R09: ffffea00011144c7
R10: fffff94000222898 R11: 0000000000000001 R12: 0000000000000000
R13: ffffea00011144c0 R14: ffff88803de82f08 R15: ffff88803de82fa0
FS:  00007fc182c38700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffd6 CR3: 0000000041770000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
note: syz-executor.6[15486] exited with irqs disabled
audit: type=1400 audit(1676372954.710:18): avc:  denied  { execmod } for  pid=15587 comm="syz-executor.5" path="/syzkaller-testdir566255166/syzkaller.ZNNX95/592/file1" dev="sda" ino=16140 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
device lo entered promiscuous mode
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.