general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: writeback wb_workfn (flush-8:0) RIP: 0010:__ext4_journal_get_write_access+0x6b/0x2b0 fs/ext4/ext4_jbd2.c:227 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 25 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 30 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f8 01 00 00 4c 8b 73 10 4d 85 f6 0f 84 f4 00 00 RSP: 0018:ffffc90000dd6db8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a4b83740 RDX: 0000000000000002 RSI: ffffffff8a067e40 RDI: 0000000000000010 RBP: ffff8880a4b83740 R08: 0000000000000001 R09: ffff8880a900ee60 R10: fffffbfff16b2399 R11: 0000000000000000 R12: 0000000000000001 R13: 1ffff920001badcb R14: ffff888214b28000 R15: 0000000000000c9d FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000046b410 CR3: 0000000096834000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ext4_mb_mark_diskspace_used+0x299/0x1130 fs/ext4/mballoc.c:3229 ext4_mb_new_blocks+0xbea/0x4720 fs/ext4/mballoc.c:4938 ext4_ext_map_blocks+0x2320/0x61b0 fs/ext4/extents.c:4238 ext4_map_blocks+0x7b8/0x1650 fs/ext4/inode.c:625 mpage_map_one_extent fs/ext4/inode.c:2376 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2429 [inline] ext4_writepages+0x1c4c/0x3960 fs/ext4/inode.c:2781 do_writepages+0xec/0x290 mm/page-writeback.c:2352 __writeback_single_inode+0x125/0x1400 fs/fs-writeback.c:1461 writeback_sb_inodes+0x53d/0xf40 fs/fs-writeback.c:1721 __writeback_inodes_wb+0xc6/0x280 fs/fs-writeback.c:1790 wb_writeback+0x8bb/0xd40 fs/fs-writeback.c:1896 wb_check_old_data_flush fs/fs-writeback.c:1998 [inline] wb_do_writeback fs/fs-writeback.c:2051 [inline] wb_workfn+0x8f5/0x13e0 fs/fs-writeback.c:2080 process_one_work+0x94c/0x1670 kernel/workqueue.c:2269 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415 kthread+0x3b5/0x4a0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Modules linked in: ---[ end trace f17ebfb08907d3c4 ]--- RIP: 0010:__ext4_journal_get_write_access+0x6b/0x2b0 fs/ext4/ext4_jbd2.c:227 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 25 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 30 48 8d 7b 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f8 01 00 00 4c 8b 73 10 4d 85 f6 0f 84 f4 00 00 RSP: 0018:ffffc90000dd6db8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a4b83740 RDX: 0000000000000002 RSI: ffffffff8a067e40 RDI: 0000000000000010 RBP: ffff8880a4b83740 R08: 0000000000000001 R09: ffff8880a900ee60 R10: fffffbfff16b2399 R11: 0000000000000000 R12: 0000000000000001 R13: 1ffff920001badcb R14: ffff888214b28000 R15: 0000000000000c9d FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb7f0a26e78 CR3: 0000000009e8d000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400