R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcea4cc27f R14: 00007fa34afbf300 R15: 0000000000022000
vhci_hcd: vhci_device speed not set
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 9470 Comm: kworker/u4:7 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Workqueue: writeback wb_workfn (flush-8:0)
RIP: 0010:relay_switch_subbuf+0x216/0x940 kernel/relay.c:761
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ca 06 00 00 48 ba 00 00 00 00 00 fc ff df 4c 8b 73 58 49 8d 7e 50 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 89 06 00 00 48 b9 00 00 00 00 00 fc ff df 49 8b
RSP: 0018:ffff888051c46fd8 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: ffff888040fba5c0 RCX: 000000000000000a
RDX: dffffc0000000000 RSI: ffffffff816319ce RDI: 0000000000000050
RBP: 0000000000000000 R08: 0000000000000010 R09: 0000000000000038
R10: 0000000000000006 R11: ffffffff8c66505b R12: 0000000000000040
R13: ffff8880adef3840 R14: 0000000000000000 R15: 0000000000000038
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa34c7401b8 CR3: 0000000096943000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 relay_reserve include/linux/relay.h:261 [inline]
 trace_note+0x5eb/0x750 kernel/trace/blktrace.c:96
 trace_note_tsk kernel/trace/blktrace.c:127 [inline]
 __blk_add_trace+0xb86/0xe20 kernel/trace/blktrace.c:267
 blk_add_trace_plug+0xfe/0x240 kernel/trace/blktrace.c:1000
 trace_block_plug include/trace/events/block.h:456 [inline]
 blk_mq_make_request+0x14b7/0x1c00 block/blk-mq.c:1902
 generic_make_request+0x613/0xdf0 block/blk-core.c:2467
 submit_bio+0xb1/0x430 block/blk-core.c:2576
 ext4_io_submit+0x181/0x210 fs/ext4/page-io.c:356
 ext4_writepages+0x17bf/0x37f0 fs/ext4/inode.c:2910
 do_writepages+0xe5/0x290 mm/page-writeback.c:2344
 __writeback_single_inode+0x10c/0x11d0 fs/fs-writeback.c:1385
 writeback_sb_inodes+0x537/0xef0 fs/fs-writeback.c:1647
 __writeback_inodes_wb+0xc6/0x280 fs/fs-writeback.c:1716
 wb_writeback+0x841/0xcc0 fs/fs-writeback.c:1822
 wb_check_old_data_flush fs/fs-writeback.c:1924 [inline]
 wb_do_writeback fs/fs-writeback.c:1977 [inline]
 wb_workfn+0x8ba/0x1250 fs/fs-writeback.c:2006
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Modules linked in:
---[ end trace a4024f37c0a5ddd4 ]---
RIP: 0010:relay_switch_subbuf+0x216/0x940 kernel/relay.c:761
Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ca 06 00 00 48 ba 00 00 00 00 00 fc ff df 4c 8b 73 58 49 8d 7e 50 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 89 06 00 00 48 b9 00 00 00 00 00 fc ff df 49 8b
RSP: 0018:ffff888051c46fd8 EFLAGS: 00010006
RAX: dffffc0000000000 RBX: ffff888040fba5c0 RCX: 000000000000000a
RDX: dffffc0000000000 RSI: ffffffff816319ce RDI: 0000000000000050
RBP: 0000000000000000 R08: 0000000000000010 R09: 0000000000000038
R10: 0000000000000006 R11: ffffffff8c66505b R12: 0000000000000040
R13: ffff8880adef3840 R14: 0000000000000000 R15: 0000000000000038
FS:  0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa34c7401b8 CR3: 0000000096943000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	48 89 fa             	mov    %rdi,%rdx
   3:	48 c1 ea 03          	shr    $0x3,%rdx
   7:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   b:	0f 85 ca 06 00 00    	jne    0x6db
  11:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  18:	fc ff df
  1b:	4c 8b 73 58          	mov    0x58(%rbx),%r14
  1f:	49 8d 7e 50          	lea    0x50(%r14),%rdi
  23:	48 89 f9             	mov    %rdi,%rcx
  26:	48 c1 e9 03          	shr    $0x3,%rcx
* 2a:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1) <-- trapping instruction
  2e:	0f 85 89 06 00 00    	jne    0x6bd
  34:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
  3b:	fc ff df
  3e:	49                   	rex.WB
  3f:	8b                   	.byte 0x8b