general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 6879 Comm: syz-executor.0 Not tainted 5.16.0-rc5-next-20211217 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:set_task_ioprio+0x2de/0x6a0 block/blk-ioc.c:289
Code: 4c 8b ab 50 11 00 00 4d 85 ed 0f 84 9b 01 00 00 e8 97 c6 4d ff 49 8d 7d 0c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 63
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
RSP: 0018:ffff88803feb7e90 EFLAGS: 00010213
CPU: 1 PID: 6883 Comm: syz-executor.7 Not tainted 5.16.0-rc5-next-20211217 #1
RAX: dffffc0000000000 RBX: ffff888040d38000 RCX: ffffc900007ef000
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RDX: 0000000000000001 RSI: ffffffff81f56989 RDI: 000000000000000c
Call Trace:
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff86a06817
 <TASK>
R10: fffffbfff0d40d02 R11: 0000000000000001 R12: 0000000000000000
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
R13: 0000000000000000 R14: ffff888040d38888 R15: ffff888040d39150
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
FS:  00007fbe4a1c9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 should_failslab+0x5/0x10 mm/slab_common.c:1304
CR2: 00007fbe4cd67018 CR3: 000000003f328000 CR4: 0000000000350ef0
 slab_pre_alloc_hook mm/slab.h:741 [inline]
 slab_alloc_node mm/slub.c:3145 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3244
Call Trace:
 mem_pool_alloc mm/kmemleak.c:430 [inline]
 create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
 <TASK>
 __do_sys_ioprio_set+0x588/0xad0 block/ioprio.c:124
 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
 slab_post_alloc_hook mm/slab.h:769 [inline]
 slab_alloc_node mm/slub.c:3231 [inline]
 kmem_cache_alloc_node+0x248/0x490 mm/slub.c:3267
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 alloc_task_struct_node kernel/fork.c:171 [inline]
 dup_task_struct kernel/fork.c:885 [inline]
 copy_process+0x2fb7/0x6d40 kernel/fork.c:2006
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fbe4cc53b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe4a1c9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
RAX: ffffffffffffffda RBX: 00007fbe4cd66f60 RCX: 00007fbe4cc53b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fbe4ccadf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe75a6eedf R14: 00007fbe4a1c9300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
 kernel_clone+0xe7/0xa60 kernel/fork.c:2622
RIP: 0010:set_task_ioprio+0x2de/0x6a0 block/blk-ioc.c:289
Code: 4c 8b ab 50 11 00 00 4d 85 ed 0f 84 9b 01 00 00 e8 97 c6 4d ff 49 8d 7d 0c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 63
RSP: 0018:ffff88803feb7e90 EFLAGS: 00010213

 __do_sys_clone+0xc1/0x100 kernel/fork.c:2739
RAX: dffffc0000000000 RBX: ffff888040d38000 RCX: ffffc900007ef000
RDX: 0000000000000001 RSI: ffffffff81f56989 RDI: 000000000000000c
RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff86a06817
R10: fffffbfff0d40d02 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: ffff888040d38888 R15: ffff888040d39150
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
FS:  00007fbe4a1c9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f51e5ebdb19
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
CR2: 00007fbe4cd67018 CR3: 000000003f328000 CR4: 0000000000350ef0
RSP: 002b:00007f51e3433188 EFLAGS: 00000246
note: syz-executor.0[6879] exited with preempt_count 1
 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f51e5fd0f60 RCX: 00007f51e5ebdb19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004028cd00
BUG: sleeping function called from invalid context at include/linux/percpu-rwsem.h:49
RBP: 00007f51e34331d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff6318cddf R14: 00007f51e3433300 R15: 0000000000022000
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 6879, name: syz-executor.0
 </TASK>
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
INFO: lockdep is turned off.
CPU: 0 PID: 6879 Comm: syz-executor.0 Tainted: G      D           5.16.0-rc5-next-20211217 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 __might_resched.cold+0x222/0x26b kernel/sched/core.c:9583
 percpu_down_read include/linux/percpu-rwsem.h:49 [inline]
 cgroup_threadgroup_change_begin include/linux/cgroup-defs.h:722 [inline]
 exit_signals+0x21/0x8e0 kernel/signal.c:2950
 do_exit+0x618/0x2960 kernel/exit.c:788
 rewind_stack_do_exit+0x17/0x17 arch/x86/entry/entry_64.S:1439
RIP: 0033:0x7fbe4cc53b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe4a1c9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
RAX: ffffffffffffffda RBX: 00007fbe4cd66f60 RCX: 00007fbe4cc53b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fbe4ccadf6d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe75a6eedf R14: 00007fbe4a1c9300 R15: 0000000000022000
 </TASK>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 6886 Comm: syz-executor.3 Tainted: G      D W         5.16.0-rc5-next-20211217 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
 should_failslab+0x5/0x10 mm/slab_common.c:1304
 slab_pre_alloc_hook mm/slab.h:741 [inline]
 slab_alloc_node mm/slub.c:3145 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3244
 mem_pool_alloc mm/kmemleak.c:430 [inline]
 create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
 slab_post_alloc_hook mm/slab.h:769 [inline]
 slab_alloc_node mm/slub.c:3231 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 kmem_cache_alloc+0x239/0x480 mm/slub.c:3244
 prepare_creds+0x2b/0x6f0 kernel/cred.c:260
 copy_creds+0x72/0x930 kernel/cred.c:365
 copy_process+0x10d5/0x6d40 kernel/fork.c:2049
 kernel_clone+0xe7/0xa60 kernel/fork.c:2622
 __do_sys_clone+0xc1/0x100 kernel/fork.c:2739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7febdb738b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007febd8cae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007febdb84bf60 RCX: 00007febdb738b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004028cd00
RBP: 00007febd8cae1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fffe8fb63bf R14: 00007febd8cae300 R15: 0000000000022000
 </TASK>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 6890 Comm: syz-executor.5 Tainted: G      D W         5.16.0-rc5-next-20211217 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
 should_failslab+0x5/0x10 mm/slab_common.c:1304
 slab_pre_alloc_hook mm/slab.h:741 [inline]
 slab_alloc_node mm/slub.c:3145 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3244
 mem_pool_alloc mm/kmemleak.c:430 [inline]
 create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:586
 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline]
 slab_post_alloc_hook mm/slab.h:769 [inline]
 slab_alloc_node mm/slub.c:3231 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 __kmalloc+0x1ed/0x330 mm/slub.c:4419
 kmalloc include/linux/slab.h:586 [inline]
 kzalloc include/linux/slab.h:715 [inline]
 lsm_cred_alloc security/security.c:537 [inline]
 security_prepare_creds+0x10a/0x180 security/security.c:1684
 prepare_creds+0x505/0x6f0 kernel/cred.c:291
 copy_creds+0x72/0x930 kernel/cred.c:365
 copy_process+0x10d5/0x6d40 kernel/fork.c:2049
 kernel_clone+0xe7/0xa60 kernel/fork.c:2622
 __do_sys_clone+0xc1/0x100 kernel/fork.c:2739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fa2f72e6b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa2f485c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fa2f73f9f60 RCX: 00007fa2f72e6b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004028cd00
RBP: 00007fa2f485c1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffdf42f89bf R14: 00007fa2f485c300 R15: 0000000000022000
 </TASK>
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 PID: 6891 Comm: syz-executor.0 Tainted: G      D W         5.16.0-rc5-next-20211217 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x8b/0xb3 lib/dump_stack.c:106
 fail_dump lib/fault-inject.c:52 [inline]
 should_fail.cold+0x5/0xa lib/fault-inject.c:146
 should_failslab+0x5/0x10 mm/slab_common.c:1304
 slab_pre_alloc_hook mm/slab.h:741 [inline]
 slab_alloc_node mm/slub.c:3145 [inline]
 slab_alloc mm/slub.c:3239 [inline]
 kmem_cache_alloc+0x5b/0x480 mm/slub.c:3244
 prepare_creds+0x2b/0x6f0 kernel/cred.c:260
 copy_creds+0x72/0x930 kernel/cred.c:365
 copy_process+0x10d5/0x6d40 kernel/fork.c:2049
 kernel_clone+0xe7/0xa60 kernel/fork.c:2622
 __do_sys_clone+0xc1/0x100 kernel/fork.c:2739
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fbe4cc53b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fbe4a1a8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fbe4cd67020 RCX: 00007fbe4cc53b19
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004028cd00
RBP: 00007fbe4a1a81d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe75a6eedf R14: 00007fbe4a1a8300 R15: 0000000000022000
 </TASK>
----------------
Code disassembly (best guess):
   0:	4c 8b ab 50 11 00 00 	mov    0x1150(%rbx),%r13
   7:	4d 85 ed             	test   %r13,%r13
   a:	0f 84 9b 01 00 00    	je     0x1ab
  10:	e8 97 c6 4d ff       	callq  0xff4dc6ac
  15:	49 8d 7d 0c          	lea    0xc(%r13),%rdi
  19:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  20:	fc ff df
  23:	48 89 fa             	mov    %rdi,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx <-- trapping instruction
  2e:	48 89 f8             	mov    %rdi,%rax
  31:	83 e0 07             	and    $0x7,%eax
  34:	83 c0 01             	add    $0x1,%eax
  37:	38 d0                	cmp    %dl,%al
  39:	7c 08                	jl     0x43
  3b:	84 d2                	test   %dl,%dl
  3d:	0f                   	.byte 0xf
  3e:	85                   	.byte 0x85
  3f:	63                   	.byte 0x63