audit: type=1800 audit(1675903480.945:28): pid=10346 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file2" dev="loop5" ino=5 res=0 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access audit: type=1800 audit(1675903481.005:29): pid=10271 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="loop4" ino=257 res=0 general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 8009 Comm: syz-executor.5 Not tainted 4.14.305-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 task: ffff8880b384a540 task.stack: ffff8880b56a8000 RIP: 0010:lbmStartIO+0x14a/0x490 fs/jfs/jfs_logmgr.c:2143 RSP: 0018:ffff8880b56afb98 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffff8880af6c4100 RCX: 0000000000000003 RDX: 000000000000001c RSI: 0000000000000000 RDI: 00000000000000e0 RBP: ffff8880a531f340 R08: 0000000000000001 R09: ffff8880a531f340 R10: ffff8880a531f3c7 R11: 0000000000000000 R12: ffff8880a536a000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00005555560f4400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2f43a000 CR3: 00000000b1848000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lbmWrite+0x254/0x380 fs/jfs/jfs_logmgr.c:2092 lmGCwrite+0x3d4/0x4d0 fs/jfs/jfs_logmgr.c:806 jfs_flush_journal.part.0+0x3e6/0x600 fs/jfs/jfs_logmgr.c:1570 jfs_flush_journal+0x23/0x30 fs/jfs/jfs_logmgr.c:1537 jfs_sync_fs+0x76/0xa0 fs/jfs/super.c:717 __sync_filesystem fs/sync.c:39 [inline] sync_filesystem fs/sync.c:64 [inline] sync_filesystem+0xe2/0x230 fs/sync.c:48 generic_shutdown_super+0x70/0x370 fs/super.c:432 kill_block_super+0x95/0xe0 fs/super.c:1161 deactivate_locked_super+0x6c/0xd0 fs/super.c:319 deactivate_super+0x7f/0xa0 fs/super.c:350 cleanup_mnt+0x186/0x2c0 fs/namespace.c:1183 task_work_run+0x11f/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f22a14ff567 RSP: 002b:00007fff307a5d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f22a14ff567 RDX: 00007fff307a5e5a RSI: 000000000000000a RDI: 00007fff307a5e50 RBP: 00007fff307a5e50 R08: 00000000ffffffff R09: 00007fff307a5c20 R10: 00005555560f5903 R11: 0000000000000246 R12: 00007f22a1558b24 R13: 00007fff307a6f10 R14: 00005555560f5810 R15: 00007fff307a6f50 Code: 48 c1 ea 03 80 3c 02 00 0f 85 06 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 6c 24 20 49 8d bd e0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d5 02 00 00 4d 8b ad e0 00 00 00 4d 39 ee 74 RIP: lbmStartIO+0x14a/0x490 fs/jfs/jfs_logmgr.c:2143 RSP: ffff8880b56afb98 f2fs_msg: 5 callbacks suppressed F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(605) F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock F2FS-fs (loop1): invalid crc value BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 F2FS-fs (loop1): Found nat_bits in checkpoint BTRFS error (device loop3): unsupported checksum algorithm 1 BTRFS error (device loop3): superblock checksum mismatch REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal BTRFS error (device loop3): open_ctree failed REISERFS (device loop2): using ordered data mode reiserfs: using flush barriers REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b REISERFS (device loop2): checking transaction log (loop2) BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 BTRFS error (device loop0): unsupported checksum algorithm 3 BTRFS error (device loop0): superblock checksum mismatch BTRFS info (device loop4): enabling inode map caching BTRFS error (device loop0): open_ctree failed BTRFS info (device loop4): trying to use backup root at mount time REISERFS (device loop2): Using r5 hash to sort names BTRFS info (device loop4): setting nodatacow, compression disabled REISERFS (device loop2): using 3.5.x disk format BTRFS info (device loop4): enabling ssd optimizations REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. BTRFS info (device loop4): using spread ssd allocation scheme ---[ end trace 8efe73ae6c89d7b5 ]--- ---------------- Code disassembly (best guess): 0: 48 c1 ea 03 shr $0x3,%rdx 4: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 8: 0f 85 06 03 00 00 jne 0x314 e: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 15: fc ff df 18: 4d 8b 6c 24 20 mov 0x20(%r12),%r13 1d: 49 8d bd e0 00 00 00 lea 0xe0(%r13),%rdi 24: 48 89 fa mov %rdi,%rdx 27: 48 c1 ea 03 shr $0x3,%rdx * 2b: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2f: 0f 85 d5 02 00 00 jne 0x30a 35: 4d 8b ad e0 00 00 00 mov 0xe0(%r13),%r13 3c: 4d 39 ee cmp %r13,%r14 3f: 74 .byte 0x74