XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x1 len 1 error 117 XFS (loop0): page discard on page 000000005199a03f, inode 0x2a, offset 0. REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 12034 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 REISERFS (device loop4): using ordered data mode RIP: 0010:__read_once_size include/linux/compiler.h:263 [inline] RIP: 0010:errseq_set+0x26/0x150 lib/errseq.c:71 Code: 1f 44 00 00 41 57 41 56 41 89 f6 41 55 41 54 55 53 48 89 fb e8 3b 6a ec fd 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f4 RSP: 0018:ffff88804f477460 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000168 RCX: 0000000000000000 RDX: 000000000000002d RSI: ffffffff83761b35 RDI: 0000000000000168 RBP: 00000000ffffff8b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000ffffff8b R15: ffff88804f4777a0 FS: 00007ff182c1c700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9ebb5f4000 CR3: 00000000afb49000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 reiserfs: using flush barriers Call Trace: __filemap_set_wb_err+0x21/0x280 mm/filemap.c:700 filemap_set_wb_err include/linux/fs.h:2707 [inline] mapping_set_error include/linux/pagemap.h:54 [inline] xfs_writepage_map fs/xfs/xfs_aops.c:796 [inline] xfs_do_writepage+0xb87/0xfa0 fs/xfs/xfs_aops.c:908 write_cache_pages+0x802/0x12d0 mm/page-writeback.c:2240 REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 xfs_vm_writepages+0xe9/0x170 fs/xfs/xfs_aops.c:943 do_writepages+0xe5/0x290 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446 REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal file_write_and_wait_range+0x93/0x100 mm/filemap.c:776 REISERFS (device loop5): using ordered data mode xfs_file_fsync+0x161/0xa40 fs/xfs/xfs_file.c:118 vfs_fsync_range+0x13a/0x220 fs/sync.c:197 generic_write_sync include/linux/fs.h:2750 [inline] xfs_file_buffered_aio_write+0xa0f/0xbf0 fs/xfs/xfs_file.c:686 xfs_file_write_iter+0x346/0x450 fs/xfs/xfs_file.c:726 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 REISERFS (device loop4): checking transaction log (loop4) vfs_write+0x1f3/0x540 fs/read_write.c:549 reiserfs: using flush barriers ksys_write+0x12b/0x2a0 fs/read_write.c:599 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7ff1846aa0c9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ff182c1c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 RAX: ffffffffffffffda RBX: 00007ff1847c9f80 RCX: 00007ff1846aa0c9 RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000004 RBP: 00007ff184705ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fffd2b3cedf R14: 00007ff182c1c300 R15: 0000000000022000 Modules linked in: ---[ end trace 7d8d6955501fea2f ]--- REISERFS (device loop1): Using r5 hash to sort names RIP: 0010:__read_once_size include/linux/compiler.h:263 [inline] RIP: 0010:errseq_set+0x26/0x150 lib/errseq.c:71 Code: 1f 44 00 00 41 57 41 56 41 89 f6 41 55 41 54 55 53 48 89 fb e8 3b 6a ec fd 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 f4 REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. REISERFS (device loop5): checking transaction log (loop5) RSP: 0018:ffff88804f477460 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000168 RCX: 0000000000000000 REISERFS (device loop2): Using r5 hash to sort names REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. RDX: 000000000000002d RSI: ffffffff83761b35 RDI: 0000000000000168 RBP: 00000000ffffff8b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. ieee802154 phy0 wpan0: encryption failed: -22 R13: 0000000000000000 R14: 00000000ffffff8b R15: ffff88804f4777a0 ieee802154 phy1 wpan1: encryption failed: -22 FS: 00007ff182c1c700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 REISERFS (device loop4): Using r5 hash to sort names CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 REISERFS (device loop5): Using r5 hash to sort names Trying to free block not in datazone REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. CR2: 00007fdbdfa2c000 CR3: 00000000afb49000 CR4: 00000000003406f0 REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. Trying to free block not in datazone Trying to free block not in datazone Trying to free block not in datazone TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. minix_free_block (loop1:6): bit already cleared DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Trying to free block not in datazone DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Trying to free block not in datazone ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 44 00 00 add %r8b,(%rax) 3: 41 57 push %r15 5: 41 56 push %r14 7: 41 89 f6 mov %esi,%r14d a: 41 55 push %r13 c: 41 54 push %r12 e: 55 push %rbp f: 53 push %rbx 10: 48 89 fb mov %rdi,%rbx 13: e8 3b 6a ec fd callq 0xfdec6a53 18: 48 89 da mov %rbx,%rdx 1b: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 22: fc ff df 25: 48 c1 ea 03 shr $0x3,%rdx * 29: 0f b6 14 02 movzbl (%rdx,%rax,1),%edx <-- trapping instruction 2d: 48 89 d8 mov %rbx,%rax 30: 83 e0 07 and $0x7,%eax 33: 83 c0 03 add $0x3,%eax 36: 38 d0 cmp %dl,%al 38: 7c 08 jl 0x42 3a: 84 d2 test %dl,%dl 3c: 0f .byte 0xf 3d: 85 f4 test %esi,%esp