general protection fault, probably for non-canonical address 0xdffffc0000000029: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000148-0x000000000000014f]
CPU: 1 PID: 15472 Comm: syz-executor.1 Not tainted 5.10.52 #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
RIP: 0010:io_sq_offload_start fs/io_uring.c:7995 [inline]
RIP: 0010:io_disable_sqo_submit+0x1b1/0x230 fs/io_uring.c:8715
Code: e8 f4 01 bc ff 85 ed 0f 84 fc fe ff ff e8 77 08 bc ff 49 8d bd 48 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 64 49 8b ad 48 01 00 00 48 85 ed 0f 84 c9 fe ff ff
RSP: 0018:ffff8880463c7d70 EFLAGS: 00010212
RAX: dffffc0000000000 RBX: ffff888017505000 RCX: ffffc900039f4000
RDX: 0000000000000029 RSI: ffffffff81837cb9 RDI: 0000000000000148
RBP: 0000000000000002 R08: 0000000000000000 R09: ffff8880175053c7
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880175053c0
R13: 0000000000000000 R14: ffff888017505048 R15: ffff888017505000
FS:  00007fb75bd66700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000203222ff CR3: 000000004cf5e000 CR4: 0000000000350ee0
Call Trace:
 io_uring_create fs/io_uring.c:9508 [inline]
 io_uring_setup+0x14e0/0x2ee0 fs/io_uring.c:9536
 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x466609
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fb75bd66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609
RDX: 0000000020ff0000 RSI: 0000000020000000 RDI: 0000000000005173
RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000020ff0000 R14: 0000000000000000 R15: 0000000020fff000
Modules linked in:
---[ end trace 59d1c49cfbbc4879 ]---
RIP: 0010:io_sq_offload_start fs/io_uring.c:7995 [inline]
RIP: 0010:io_disable_sqo_submit+0x1b1/0x230 fs/io_uring.c:8715
Code: e8 f4 01 bc ff 85 ed 0f 84 fc fe ff ff e8 77 08 bc ff 49 8d bd 48 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 64 49 8b ad 48 01 00 00 48 85 ed 0f 84 c9 fe ff ff
RSP: 0018:ffff8880463c7d70 EFLAGS: 00010212
RAX: dffffc0000000000 RBX: ffff888017505000 RCX: ffffc900039f4000
RDX: 0000000000000029 RSI: ffffffff81837cb9 RDI: 0000000000000148
RBP: 0000000000000002 R08: 0000000000000000 R09: ffff8880175053c7
R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880175053c0
R13: 0000000000000000 R14: ffff888017505048 R15: ffff888017505000
FS:  00007fb75bd66700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000203222ff CR3: 000000004cf5e000 CR4: 0000000000350ee0
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
new mount options do not match the existing superblock, will be ignored
FAT-fs (loop6): Directory bread(block 5) failed
FAT-fs (loop6): Directory bread(block 5) failed
FAT-fs (loop6): Directory bread(block 5) failed
FAT-fs (loop6): Directory bread(block 5) failed
EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue