XFS (loop0): metadata I/O error: block 0x4 ("xfs_trans_read_buf_map") error 117 numblks 1
XFS (loop0): page discard on page ffffea00022ceb80, inode 0x29, offset 0.
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7986 Comm: syz-executor302 Not tainted 4.14.302-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
task: ffff8880b1a525c0 task.stack: ffff8880b33d8000
RIP: 0010:__read_once_size include/linux/compiler.h:185 [inline]
RIP: 0010:errseq_set+0x27/0xf0 lib/errseq.c:71
RSP: 0018:ffff8880b33df180 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000168 RCX: 0000000000000000
RDX: 000000000000002d RSI: 00000000ffffff8b RDI: 0000000000000168
RBP: 00000000ffffff8b R08: ffff8880ba434d30 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffff8b
R13: ffff8880b33df4f0 R14: 00000000ffffff8b R15: ffff88808cb7b340
FS:  00007f90b1552700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f48c3af1000 CR3: 0000000099179000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __filemap_set_wb_err+0x22/0x260 mm/filemap.c:602
 filemap_set_wb_err include/linux/fs.h:2641 [inline]
 mapping_set_error include/linux/pagemap.h:52 [inline]
 xfs_writepage_map fs/xfs/xfs_aops.c:1034 [inline]
 xfs_do_writepage+0xcf0/0x13d0 fs/xfs/xfs_aops.c:1149
 write_cache_pages+0x505/0xd20 mm/page-writeback.c:2257
 xfs_vm_writepages+0x258/0x340 fs/xfs/xfs_aops.c:1188
 do_writepages+0xc3/0x240 mm/page-writeback.c:2361
 __filemap_fdatawrite_range+0x236/0x310 mm/filemap.c:346
 file_write_and_wait_range+0x86/0xd0 mm/filemap.c:678
 xfs_file_fsync+0x123/0x960 fs/xfs/xfs_file.c:143
 vfs_fsync_range+0x103/0x260 fs/sync.c:196
 generic_write_sync include/linux/fs.h:2684 [inline]
 xfs_file_write_iter+0x4df/0x680 fs/xfs/xfs_file.c:749
 call_write_iter include/linux/fs.h:1780 [inline]
 do_iter_readv_writev+0x4cf/0x5f0 fs/read_write.c:675
 do_iter_write+0x152/0x550 fs/read_write.c:954
 vfs_iter_write+0x70/0xa0 fs/read_write.c:967
 iter_file_splice_write+0x52b/0xa90 fs/splice.c:749
 do_splice_from fs/splice.c:851 [inline]
 direct_splice_actor+0x115/0x160 fs/splice.c:1018
 splice_direct_to_actor+0x27c/0x730 fs/splice.c:973
 do_splice_direct+0x164/0x210 fs/splice.c:1061
 do_sendfile+0x47f/0xb30 fs/read_write.c:1441
 SYSC_sendfile64 fs/read_write.c:1502 [inline]
 SyS_sendfile64+0xff/0x110 fs/read_write.c:1488
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7f90b15a6569
RSP: 002b:00007f90b15522f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f90b16367a0 RCX: 00007f90b15a6569
RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
RBP: 00007f90b16031e4 R08: 0000000000000000 R09: 0000000000000000
R10: 000100000020100f R11: 0000000000000246 R12: 00007f90b15f80c0
R13: 0000000020000500 R14: 0030656c69662f2e R15: 00007f90b16367a8
Code: 0f 1f 40 00 41 56 41 55 41 54 55 89 f5 53 48 89 fb 48 83 ec 08 e8 5a a0 3b fe 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 
RIP: __read_once_size include/linux/compiler.h:185 [inline] RSP: ffff8880b33df180
RIP: errseq_set+0x27/0xf0 lib/errseq.c:71 RSP: ffff8880b33df180
---[ end trace a2a768122a726c4c ]---
----------------
Code disassembly (best guess):
   0:	0f 1f 40 00          	nopl   0x0(%rax)
   4:	41 56                	push   %r14
   6:	41 55                	push   %r13
   8:	41 54                	push   %r12
   a:	55                   	push   %rbp
   b:	89 f5                	mov    %esi,%ebp
   d:	53                   	push   %rbx
   e:	48 89 fb             	mov    %rdi,%rbx
  11:	48 83 ec 08          	sub    $0x8,%rsp
  15:	e8 5a a0 3b fe       	callq  0xfe3ba074
  1a:	48 89 da             	mov    %rbx,%rdx
  1d:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  24:	fc ff df
  27:	48 c1 ea 03          	shr    $0x3,%rdx
* 2b:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx <-- trapping instruction
  2f:	48 89 d8             	mov    %rbx,%rax
  32:	83 e0 07             	and    $0x7,%eax
  35:	83 c0 03             	add    $0x3,%eax
  38:	38 d0                	cmp    %dl,%al
  3a:	7c 08                	jl     0x44
  3c:	84 d2                	test   %dl,%dl
  3e:	0f                   	.byte 0xf
  3f:	85                   	.byte 0x85