program: mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x2000001c, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0xff, 0x5f81, &(0x7f00000030c0)="$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") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) r9 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x14, 0x1, 0x0, r9, &(0x7f0000000000), 0x100000}]) sendfile(r7, r8, 0x0, 0x80000002) syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) write$tun(r9, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r12, &(0x7f0000000340)={0x0, 0x37a3, 0x1000, 0x3, 0x20b}, 0x0, 0x4, &(0x7f0000003040)={0x2e, 0x0, 0x0, r11, 0xc0107525, 0x0, 0xf4, 0x0, 0x0, {0x1}, 0x0, r6, '\x00', {0x1, 0x11a, 0x80002, 0x0}}, 0x0) [ 94.276823][ T4642] Bluetooth: hci0: command tx timeout [ 94.517118][ T5312] loop0: detected capacity change from 0 to 32768 [ 94.590889][ T26] audit: type=1800 audit(1789911818.726:2): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 95.133123][ T5312] BUG at fs/jfs/jfs_dmap.c:3070 assert(n < 4) [ 95.134502][ T5312] ------------[ cut here ]------------ [ 95.134512][ T5312] kernel BUG at fs/jfs/jfs_dmap.c:3070! [ 95.167663][ T5312] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 95.170570][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.174612][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.178887][ T5312] RIP: 0010:dbFindLeaf+0x519/0x520 [ 95.180940][ T5312] Code: e9 4e ff ff ff e8 e7 f7 56 fe 48 c7 c7 e0 da 4d 8c 48 c7 c6 20 d8 4d 8c ba fe 0b 00 00 48 c7 c1 00 e6 4d 8c e8 48 d4 b6 fd 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 95.189187][ T5312] RSP: 0018:ffffc9000dd4ed98 EFLAGS: 00010246 [ 95.191889][ T5312] RAX: 000000000000002b RBX: 00000000ffffffff RCX: 2ff9d4a7c29eb300 [ 95.195293][ T5312] RDX: ffffc9000ed62000 RSI: 00000000000ca8d5 RDI: 00000000000ca8d6 [ 95.198668][ T5312] RBP: 0000000000000001 R08: ffffc9000dd4eb27 R09: 1ffff92001ba9d64 [ 95.201831][ T5312] R10: dffffc0000000000 R11: fffff52001ba9d65 R12: 0000000000000004 [ 95.205194][ T5312] R13: 00000000000000cd R14: 00000000000000d0 R15: 0000000000000155 [ 95.208563][ T5312] FS: 00007ff6ab2ff6c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000 [ 95.211810][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.214638][ T5312] CR2: 00007f395df748c0 CR3: 000000000bf2a000 CR4: 0000000000352ef0 [ 95.218121][ T5312] Call Trace: [ 95.219632][ T5312] [ 95.220930][ T5312] dbAllocDmapLev+0x60/0x3b0 [ 95.222971][ T5312] dbAllocCtl+0x145/0x990 [ 95.224907][ T5312] dbAllocAG+0x1f4/0xf80 [ 95.226733][ T5312] ? down_write_nested+0x172/0x210 [ 95.228980][ T5312] ? __pfx_down_write_nested+0x10/0x10 [ 95.231410][ T5312] dbAlloc+0x5ab/0xba0 [ 95.233200][ T5312] extAlloc+0x57d/0x1010 [ 95.235097][ T5312] ? __pfx_extAlloc+0x10/0x10 [ 95.237141][ T5312] ? down_write_nested+0x172/0x210 [ 95.239365][ T5312] ? __pfx_down_write_nested+0x10/0x10 [ 95.241728][ T5312] jfs_get_block+0x351/0xad0 [ 95.243792][ T5312] ? __pfx_jfs_get_block+0x10/0x10 [ 95.246012][ T5312] ? __pfx_jfs_get_block+0x10/0x10 [ 95.248168][ T5312] __blockdev_direct_IO+0x1590/0x3380 [ 95.250404][ T5312] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 95.252821][ T5312] ? __lock_acquire+0x747/0x2de0 [ 95.254913][ T5312] ? __pfx_jfs_get_block+0x10/0x10 [ 95.257047][ T5312] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 95.259998][ T5312] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 95.262731][ T5312] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.265072][ T5312] ? current_time+0x22f/0x380 [ 95.267174][ T5312] jfs_direct_IO+0x119/0x220 [ 95.269295][ T5312] generic_file_direct_write+0x1d0/0x3f0 [ 95.271762][ T5312] __generic_file_write_iter+0x11d/0x230 [ 95.274340][ T5312] ? generic_file_write_iter+0x9a/0x330 [ 95.276765][ T5312] generic_file_write_iter+0xae/0x330 [ 95.278994][ T5312] iter_file_splice_write+0xa31/0x1240 [ 95.281346][ T5312] ? __pfx_iter_file_splice_write+0x10/0x10 [ 95.284204][ T5312] ? __pfx_iter_file_splice_write+0x10/0x10 [ 95.286984][ T5312] direct_splice_actor+0x101/0x160 [ 95.289428][ T5312] splice_direct_to_actor+0x57b/0xcb0 [ 95.291772][ T5312] ? __pfx_direct_splice_actor+0x10/0x10 [ 95.294115][ T5312] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 95.296587][ T5312] do_splice_direct+0x195/0x290 [ 95.298642][ T5312] ? __pfx_do_splice_direct+0x10/0x10 [ 95.300854][ T5312] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 95.303366][ T5312] ? rw_verify_area+0x203/0x4c0 [ 95.305404][ T5312] do_sendfile+0x52e/0x7c0 [ 95.307415][ T5312] ? __pfx_do_sendfile+0x10/0x10 [ 95.309656][ T5312] ? __se_sys_futex+0x3a8/0x450 [ 95.311834][ T5312] __se_sys_sendfile64+0x144/0x1a0 [ 95.314156][ T5312] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 95.316614][ T5312] do_syscall_64+0x166/0x520 [ 95.318667][ T5312] ? trace_irq_disable+0x3b/0x140 [ 95.320802][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.323354][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 95.325307][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.328080][ T5312] RIP: 0033:0x7ff6aa39e159 [ 95.330190][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.339141][ T5312] RSP: 002b:00007ff6ab2fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 95.343422][ T5312] RAX: ffffffffffffffda RBX: 00007ff6aa625fa0 RCX: 00007ff6aa39e159 [ 95.347349][ T5312] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 95.351405][ T5312] RBP: 00007ff6aa43506b R08: 0000000000000000 R09: 0000000000000000 [ 95.355592][ T5312] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000 [ 95.359339][ T5312] R13: 00007ff6aa626038 R14: 00007ff6aa625fa0 R15: 00007fffc3a40848 [ 95.363018][ T5312] [ 95.364570][ T5312] Modules linked in: [ 95.367152][ T5312] ---[ end trace 0000000000000000 ]--- [ 95.456278][ T5312] RIP: 0010:dbFindLeaf+0x519/0x520 [ 95.456304][ T5312] Code: e9 4e ff ff ff e8 e7 f7 56 fe 48 c7 c7 e0 da 4d 8c 48 c7 c6 20 d8 4d 8c ba fe 0b 00 00 48 c7 c1 00 e6 4d 8c e8 48 d4 b6 fd 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 95.456311][ T5312] RSP: 0018:ffffc9000dd4ed98 EFLAGS: 00010246 [ 95.456320][ T5312] RAX: 000000000000002b RBX: 00000000ffffffff RCX: 2ff9d4a7c29eb300 [ 95.456327][ T5312] RDX: ffffc9000ed62000 RSI: 00000000000ca8d5 RDI: 00000000000ca8d6 [ 95.456332][ T5312] RBP: 0000000000000001 R08: ffffc9000dd4eb27 R09: 1ffff92001ba9d64 [ 95.456338][ T5312] R10: dffffc0000000000 R11: fffff52001ba9d65 R12: 0000000000000004 [ 95.456344][ T5312] R13: 00000000000000cd R14: 00000000000000d0 R15: 0000000000000155 [ 95.456350][ T5312] FS: 00007ff6ab2ff6c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000 [ 95.456356][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.456360][ T5312] CR2: 000055af614f3168 CR3: 000000000bf2a000 CR4: 0000000000352ef0 [ 95.456451][ T5312] Kernel panic - not syncing: Fatal exception [ 95.498089][ T5312] Kernel Offset: disabled [ 95.500099][ T5312] Rebooting in 86400 seconds..