BUG: unable to handle kernel paging request at ffffed101c869804 PGD 23fff3067 P4D 23fff3067 PUD 13fff8067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 1985 Comm: jfsCommit Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:dbAdjTree+0x65/0x2c0 fs/jfs/jfs_dmap.c:2910 Code: c0 03 38 d0 7c 08 84 d2 0f 85 0d 02 00 00 48 b8 00 00 00 00 00 fc ff df 03 5d 08 4c 63 eb 4a 8d 7c 2d 11 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d1 01 00 00 RSP: 0018:ffff8880b0aef760 EFLAGS: 00010a02 RAX: dffffc0000000000 RBX: 0000000055000001 RCX: ffffffff82754a55 RDX: 1ffff1101c869804 RSI: ffffffff827546cb RDI: ffff8880e434c022 RBP: ffff88808f34c010 R08: 0000000000000000 R09: 0000000000000010 R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000004 R13: 0000000055000001 R14: 0000000000000001 R15: ffff88808f34c010 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed101c869804 CR3: 000000009884e000 CR4: 00000000003426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dbJoin+0x1d0/0x220 fs/jfs/jfs_dmap.c:2877 dbFreeBits+0xf0/0x710 fs/jfs/jfs_dmap.c:2378 dbFreeDmap+0x61/0x1a0 fs/jfs/jfs_dmap.c:2127 dbFree+0x252/0x500 fs/jfs/jfs_dmap.c:385 txFreeMap+0x60e/0xb20 fs/jfs/jfs_txnmgr.c:2560 xtTruncate+0x1bea/0x25b0 fs/jfs/jfs_xtree.c:3441 jfs_free_zero_link+0x2ea/0x440 fs/jfs/namei.c:770 jfs_evict_inode+0x1d2/0x210 fs/jfs/inode.c:162 evict+0x2ed/0x760 fs/inode.c:559 iput_final fs/inode.c:1555 [inline] iput+0x4f1/0x860 fs/inode.c:1581 txUpdateMap+0xd88/0x1000 fs/jfs/jfs_txnmgr.c:2412 txLazyCommit fs/jfs/jfs_txnmgr.c:2709 [inline] jfs_lazycommit+0x525/0x9d0 fs/jfs/jfs_txnmgr.c:2777 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Modules linked in: CR2: ffffed101c869804 ---[ end trace 0992613090d32903 ]--- RIP: 0010:dbAdjTree+0x65/0x2c0 fs/jfs/jfs_dmap.c:2910 Code: c0 03 38 d0 7c 08 84 d2 0f 85 0d 02 00 00 48 b8 00 00 00 00 00 fc ff df 03 5d 08 4c 63 eb 4a 8d 7c 2d 11 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d1 01 00 00 RSP: 0018:ffff8880b0aef760 EFLAGS: 00010a02 RAX: dffffc0000000000 RBX: 0000000055000001 RCX: ffffffff82754a55 RDX: 1ffff1101c869804 RSI: ffffffff827546cb RDI: ffff8880e434c022 RBP: ffff88808f34c010 R08: 0000000000000000 R09: 0000000000000010 R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000004 R13: 0000000055000001 R14: 0000000000000001 R15: ffff88808f34c010 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffed101c869804 CR3: 000000009884e000 CR4: 00000000003426f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 2 bytes skipped: 0: 38 d0 cmp %dl,%al 2: 7c 08 jl 0xc 4: 84 d2 test %dl,%dl 6: 0f 85 0d 02 00 00 jne 0x219 c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 13: fc ff df 16: 03 5d 08 add 0x8(%rbp),%ebx 19: 4c 63 eb movslq %ebx,%r13 1c: 4a 8d 7c 2d 11 lea 0x11(%rbp,%r13,1),%rdi 21: 48 89 fa mov %rdi,%rdx 24: 48 c1 ea 03 shr $0x3,%rdx * 28: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax <-- trapping instruction 2c: 48 89 fa mov %rdi,%rdx 2f: 83 e2 07 and $0x7,%edx 32: 38 d0 cmp %dl,%al 34: 7f 08 jg 0x3e 36: 84 c0 test %al,%al 38: 0f 85 d1 01 00 00 jne 0x20f