audit: type=1800 audit(1672860237.768:21): pid=12647 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="loop1" ino=7 res=0 BTRFS error (device loop3): open_ctree failed BUG at fs/jfs/jfs_logmgr.c:2326 assert(bp->l_flag & lbmRELEASE) ------------[ cut here ]------------ kernel BUG at fs/jfs/jfs_logmgr.c:2326! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 12645 Comm: loop1 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 task: ffff88804ddf8400 task.stack: ffff888043cf8000 RIP: 0010:lbmIODone.cold+0x24/0x5b fs/jfs/jfs_logmgr.c:2326 RSP: 0018:ffff888043cffb00 EFLAGS: 00010082 RAX: 000000000000003f RBX: ffff88809cca3b00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff878bd020 RDI: ffffed100879ff56 RBP: 0000000000000020 R08: 000000000000003f R09: 0000000000000001 R10: 0000000000000000 R11: ffff88804ddf8400 R12: 0000000000000282 R13: 0000000000000000 R14: ffff88809c3396c0 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555556ae7848 CR3: 00000000a2164000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: bio_endio+0x290/0x690 block/bio.c:1918 req_bio_endio block/blk-core.c:204 [inline] blk_update_request+0x2d0/0xa90 block/blk-core.c:2765 blk_mq_end_request+0x4c/0x1e0 block/blk-mq.c:530 __blk_mq_complete_request+0x30b/0x6c0 block/blk-mq.c:571 blk_mq_complete_request+0x52/0x60 block/blk-mq.c:591 loop_handle_cmd drivers/block/loop.c:1789 [inline] loop_queue_work+0x228/0x21e0 drivers/block/loop.c:1798 kthread_worker_fn+0x271/0x6c0 kernel/kthread.c:667 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406 Code: 76 fa e8 cb ff ff ff e8 53 db 4c fa 48 c7 c1 00 c2 b6 87 ba 16 09 00 00 48 c7 c6 80 c1 b6 87 48 c7 c7 c0 c1 b6 87 e8 be b9 fa ff <0f> 0b e8 2d db 4c fa 48 c7 c1 40 c2 b6 87 ba 17 09 00 00 48 c7 RIP: lbmIODone.cold+0x24/0x5b fs/jfs/jfs_logmgr.c:2326 RSP: ffff888043cffb00 ---[ end trace a2e8da3547488c94 ]---