00000000978ec8d7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x4 len 1 error 117
XFS (loop0): page discard on page 0000000058f566c3, inode 0x29, offset 0.
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 8307 Comm: syz-executor310 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
RIP: 0010:__read_once_size include/linux/compiler.h:263 [inline]
RIP: 0010:errseq_set+0x26/0x150 lib/errseq.c:71
Code: 1f 44 00 00 41 57 41 56 41 89 f6 41 55 41 54 55 53 48 89 fb e8 3b 6a ec fd 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f4
RSP: 0018:ffff8880afac6f40 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000168 RCX: 0000000000000000
RDX: 000000000000002d RSI: ffffffff83761b35 RDI: 0000000000000168
RBP: 00000000ffffff8b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 00000000ffffff8b R15: ffff8880afac7280
syz-executor310 (8079) used greatest stack depth: 23264 bytes left
FS: 00007ff6ffb1b700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff6ffbb58f0 CR3: 000000009aeeb000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__filemap_set_wb_err+0x21/0x280 mm/filemap.c:700
filemap_set_wb_err include/linux/fs.h:2707 [inline]
mapping_set_error include/linux/pagemap.h:54 [inline]
xfs_writepage_map fs/xfs/xfs_aops.c:796 [inline]
xfs_do_writepage+0xb87/0xfa0 fs/xfs/xfs_aops.c:908
write_cache_pages+0x802/0x12d0 mm/page-writeback.c:2240
xfs_vm_writepages+0xe9/0x170 fs/xfs/xfs_aops.c:943
do_writepages+0xe5/0x290 mm/page-writeback.c:2344
__filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446
file_write_and_wait_range+0x93/0x100 mm/filemap.c:776
xfs_file_fsync+0x161/0xa40 fs/xfs/xfs_file.c:118
vfs_fsync_range+0x13a/0x220 fs/sync.c:197
generic_write_sync include/linux/fs.h:2750 [inline]
xfs_file_buffered_aio_write+0xa0f/0xbf0 fs/xfs/xfs_file.c:686
xfs_file_write_iter+0x346/0x450 fs/xfs/xfs_file.c:726
call_write_iter include/linux/fs.h:1821 [inline]
do_iter_readv_writev+0x668/0x790 fs/read_write.c:681
do_iter_write+0x182/0x5d0 fs/read_write.c:960
vfs_iter_write+0x70/0xa0 fs/read_write.c:973
iter_file_splice_write+0x60d/0xbb0 fs/splice.c:750
do_splice_from fs/splice.c:852 [inline]
direct_splice_actor+0x115/0x160 fs/splice.c:1025
splice_direct_to_actor+0x33f/0x8d0 fs/splice.c:980
do_splice_direct+0x1a7/0x270 fs/splice.c:1068
do_sendfile+0x550/0xc30 fs/read_write.c:1447
__do_sys_sendfile64 fs/read_write.c:1508 [inline]
__se_sys_sendfile64+0x147/0x160 fs/read_write.c:1494
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7ff6ffb72a19
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff6ffb1b208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007ff6ffc027a8 RCX: 00007ff6ffb72a19
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007ff6ffc027a0 R08: 0000000000000000 R09: 0000000000000000
R10: 000100000020100f R11: 0000000000000246 R12: 00007ff6ffc027ac
R13: 00007ffefc022f9f R14: 00007ff6ffb1b300 R15: 0000000000022000
Modules linked in:
---[ end trace 9c8377e19ec2dda7 ]---
RIP: 0010:__read_once_size include/linux/compiler.h:263 [inline]
RIP: 0010:errseq_set+0x26/0x150 lib/errseq.c:71
Code: 1f 44 00 00 41 57 41 56 41 89 f6 41 55 41 54 55 53 48 89 fb e8 3b 6a ec fd 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f4
RSP: 0018:ffff8880afac6f40 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000168 RCX: 0000000000000000
RDX: 000000000000002d RSI: ffffffff83761b35 RDI: 0000000000000168
RBP: 00000000ffffff8b R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 00000000ffffff8b R15: ffff8880afac7280
FS: 00007ff6ffb1b700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e7afa8c848 CR3: 000000009aeeb000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 1 bytes skipped:
0: 44 00 00 add %r8b,(%rax)
3: 41 57 push %r15
5: 41 56 push %r14
7: 41 89 f6 mov %esi,%r14d
a: 41 55 push %r13
c: 41 54 push %r12
e: 55 push %rbp
f: 53 push %rbx
10: 48 89 fb mov %rdi,%rbx
13: e8 3b 6a ec fd callq 0xfdec6a53
18: 48 89 da mov %rbx,%rdx
1b: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
22: fc ff df
25: 48 c1 ea 03 shr $0x3,%rdx
* 29: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx <-- trapping instruction
2d: 48 89 d8 mov %rbx,%rax
30: 83 e0 07 and $0x7,%eax
33: 83 c0 03 add $0x3,%eax
36: 38 d0 cmp %dl,%al
38: 7c 08 jl 0x42
3a: 84 d2 test %dl,%dl
3c: 0f .byte 0xf
3d: 85 f4 test %esi,%esp