IPVS: ftp: loaded support on port[0] = 21 BUG: unable to handle kernel paging request at ffffed10181dbc04 IP: dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2944 PGD 23fff2067 P4D 23fff2067 PUD 13fff6067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 1963 Comm: jfsCommit Not tainted 4.14.298-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 task: ffff8880b0f04100 task.stack: ffff8880b0f18000 RIP: 0010:dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2944 RSP: 0018:ffff8880b0f1f7e0 EFLAGS: 00010a02 RAX: 1ffff110181dbc04 RBX: 0000000000000004 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000003 RDI: ffff8880c0ede021 RBP: 0000000015400000 R08: 0000000000000000 R09: 0000000000000001 R10: 0000000000000000 R11: ffff8880b0f04100 R12: 0000000000000000 R13: dffffc0000000000 R14: 0000000015400000 R15: ffff8880abade010 FS: 0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed10181dbc04 CR3: 0000000008e6a000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dbJoin+0x19e/0x200 fs/jfs/jfs_dmap.c:2885 dbFreeBits+0xd4/0x660 fs/jfs/jfs_dmap.c:2386 dbFreeDmap+0x61/0x180 fs/jfs/jfs_dmap.c:2135 dbFree+0x20c/0x4b0 fs/jfs/jfs_dmap.c:392 txFreeMap+0x52d/0xa00 fs/jfs/jfs_txnmgr.c:2560 xtTruncate+0x186d/0x21e0 fs/jfs/jfs_xtree.c:3441 jfs_free_zero_link+0x347/0x3b0 fs/jfs/namei.c:772 jfs_evict_inode+0x1c9/0x210 fs/jfs/inode.c:163 evict+0x2c8/0x700 fs/inode.c:554 iput_final fs/inode.c:1523 [inline] iput+0x458/0x7e0 fs/inode.c:1550 txUpdateMap+0xba5/0xe30 fs/jfs/jfs_txnmgr.c:2412 txLazyCommit fs/jfs/jfs_txnmgr.c:2709 [inline] jfs_lazycommit+0x48b/0x8c0 fs/jfs/jfs_txnmgr.c:2777 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406 Code: f1 7f 04 84 c9 75 74 38 c3 0f 4c d8 41 0f b6 46 01 4c 63 f5 4b 8d 7c 37 11 48 89 f9 38 c3 0f 4c d8 48 89 f8 83 e1 07 48 c1 e8 03 <42> 0f b6 04 28 38 c8 7f 04 84 c0 75 3c 43 38 5c 37 11 0f 85 f5 RIP: dbAdjTree+0x1d3/0x280 fs/jfs/jfs_dmap.c:2944 RSP: ffff8880b0f1f7e0 CR2: ffffed10181dbc04 ---[ end trace a12c2529c93c7376 ]--- ---------------- Code disassembly (best guess): 0: f1 icebp 1: 7f 04 jg 0x7 3: 84 c9 test %cl,%cl 5: 75 74 jne 0x7b 7: 38 c3 cmp %al,%bl 9: 0f 4c d8 cmovl %eax,%ebx c: 41 0f b6 46 01 movzbl 0x1(%r14),%eax 11: 4c 63 f5 movslq %ebp,%r14 14: 4b 8d 7c 37 11 lea 0x11(%r15,%r14,1),%rdi 19: 48 89 f9 mov %rdi,%rcx 1c: 38 c3 cmp %al,%bl 1e: 0f 4c d8 cmovl %eax,%ebx 21: 48 89 f8 mov %rdi,%rax 24: 83 e1 07 and $0x7,%ecx 27: 48 c1 e8 03 shr $0x3,%rax * 2b: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax <-- trapping instruction 30: 38 c8 cmp %cl,%al 32: 7f 04 jg 0x38 34: 84 c0 test %al,%al 36: 75 3c jne 0x74 38: 43 38 5c 37 11 cmp %bl,0x11(%r15,%r14,1) 3d: 0f .byte 0xf 3e: 85 f5 test %esi,%ebp