IPVS: ftp: loaded support on port[0] = 21 audit: type=1800 audit(1677448473.407:2): pid=7995 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor552" name="bus" dev="loop0" ino=7 res=0 BUG: unable to handle kernel paging request at ffffed1019965f44 IP: dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2959 PGD 23fff2067 P4D 23fff2067 PUD 13fff6067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 1964 Comm: jfsCommit Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 task: ffff8880b0f50140 task.stack: ffff8880b0f58000 RIP: 0010:dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2959 RSP: 0018:ffff8880b0f5fb38 EFLAGS: 00010a06 RAX: 1ffff11019965f44 RBX: 0000000000000003 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8880ccb2fa21 RBP: 0000000018dd1a00 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880b0f50140 R12: 0000000000000000 R13: dffffc0000000000 R14: 0000000018dd1a00 R15: ffff8880b3d5e010 FS: 0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed1019965f44 CR3: 000000009546a000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dbJoin+0x19e/0x200 fs/jfs/jfs_dmap.c:2900 dbFreeBits+0xd4/0x660 fs/jfs/jfs_dmap.c:2401 dbFreeDmap+0x61/0x180 fs/jfs/jfs_dmap.c:2150 dbFree+0x20c/0x4b0 fs/jfs/jfs_dmap.c:407 txFreeMap+0x691/0xa00 fs/jfs/jfs_txnmgr.c:2579 txUpdateMap+0x2e3/0xe30 fs/jfs/jfs_txnmgr.c:2375 txLazyCommit fs/jfs/jfs_txnmgr.c:2709 [inline] jfs_lazycommit+0x48b/0x8c0 fs/jfs/jfs_txnmgr.c:2777 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406 Code: f1 7f 04 84 c9 75 74 38 c3 0f 4c d8 41 0f b6 46 01 4c 63 f5 4b 8d 7c 37 11 48 89 f9 38 c3 0f 4c d8 48 89 f8 83 e1 07 48 c1 e8 03 <42> 0f b6 04 28 38 c8 7f 04 84 c0 75 3c 43 38 5c 37 11 0f 85 f5 RIP: dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2959 RSP: ffff8880b0f5fb38 CR2: ffffed1019965f44 ---[ end trace 19ae6c72eed56cd2 ]--- ---------------- Code disassembly (best guess): 0: f1 icebp 1: 7f 04 jg 0x7 3: 84 c9 test %cl,%cl 5: 75 74 jne 0x7b 7: 38 c3 cmp %al,%bl 9: 0f 4c d8 cmovl %eax,%ebx c: 41 0f b6 46 01 movzbl 0x1(%r14),%eax 11: 4c 63 f5 movslq %ebp,%r14 14: 4b 8d 7c 37 11 lea 0x11(%r15,%r14,1),%rdi 19: 48 89 f9 mov %rdi,%rcx 1c: 38 c3 cmp %al,%bl 1e: 0f 4c d8 cmovl %eax,%ebx 21: 48 89 f8 mov %rdi,%rax 24: 83 e1 07 and $0x7,%ecx 27: 48 c1 e8 03 shr $0x3,%rax * 2b: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax <-- trapping instruction 30: 38 c8 cmp %cl,%al 32: 7f 04 jg 0x38 34: 84 c0 test %al,%al 36: 75 3c jne 0x74 38: 43 38 5c 37 11 cmp %bl,0x11(%r15,%r14,1) 3d: 0f .byte 0xf 3e: 85 f5 test %esi,%ebp