general protection fault, probably for non-canonical address 0xdffffc0000000029: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000148-0x000000000000014f] CPU: 0 PID: 7886 Comm: syz-executor.1 Not tainted 5.10.52 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:io_sq_offload_start fs/io_uring.c:7995 [inline] RIP: 0010:io_disable_sqo_submit+0x1b1/0x230 fs/io_uring.c:8715 Code: e8 f4 01 bc ff 85 ed 0f 84 fc fe ff ff e8 77 08 bc ff 49 8d bd 48 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 64 49 8b ad 48 01 00 00 48 85 ed 0f 84 c9 fe ff ff RSP: 0018:ffff888040f1fd70 EFLAGS: 00010212 RAX: dffffc0000000000 RBX: ffff888044fc0000 RCX: ffffc900011e2000 RDX: 0000000000000029 RSI: ffffffff81837cb9 RDI: 0000000000000148 RBP: 0000000000000002 R08: 0000000000000000 R09: ffff888044fc03c7 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044fc03c0 R13: 0000000000000000 R14: ffff888044fc0048 R15: ffff888044fc0000 FS: 00007f30f9da4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557d01024080 CR3: 000000004498c000 CR4: 0000000000350ef0 Call Trace: io_uring_create fs/io_uring.c:9508 [inline] io_uring_setup+0x14e0/0x2ee0 fs/io_uring.c:9536 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x466609 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f30f9da4108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 RDX: 0000000020ff0000 RSI: 0000000020000000 RDI: 0000000000005173 RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000020ff0000 R14: 0000000000000000 R15: 0000000020fff000 Modules linked in: ---[ end trace dbfa64f73c40ff2c ]--- RIP: 0010:io_sq_offload_start fs/io_uring.c:7995 [inline] RIP: 0010:io_disable_sqo_submit+0x1b1/0x230 fs/io_uring.c:8715 Code: e8 f4 01 bc ff 85 ed 0f 84 fc fe ff ff e8 77 08 bc ff 49 8d bd 48 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 64 49 8b ad 48 01 00 00 48 85 ed 0f 84 c9 fe ff ff RSP: 0018:ffff888040f1fd70 EFLAGS: 00010212 RAX: dffffc0000000000 RBX: ffff888044fc0000 RCX: ffffc900011e2000 RDX: 0000000000000029 RSI: ffffffff81837cb9 RDI: 0000000000000148 RBP: 0000000000000002 R08: 0000000000000000 R09: ffff888044fc03c7 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888044fc03c0 R13: 0000000000000000 R14: ffff888044fc0048 R15: ffff888044fc0000 FS: 00007f30f9da4700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000557d01024080 CR3: 000000004498c000 CR4: 0000000000350ef0 Module has invalid ELF structures Module has invalid ELF structures EXT4-fs error (device loop7): ext4_fill_super:4954: inode #2: comm syz-executor.7: iget: root inode unallocated EXT4-fs (loop7): get root inode failed EXT4-fs (loop7): mount failed Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures EXT4-fs error (device loop7): ext4_fill_super:4954: inode #2: comm syz-executor.7: iget: root inode unallocated EXT4-fs (loop7): get root inode failed EXT4-fs (loop7): mount failed 9p: Unknown access argument 18446744073709551615ýC˙˙˙˙˙˙ 9p: Unknown access argument 18446744073709551615ýC˙˙˙˙˙˙