Read error 10 at 0x4000
read_mapping_page failed!
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 0 UID: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:diUpdatePMap+0x65/0xe60 fs/jfs/jfs_imap.c:2742
Code: 03 42 80 3c 28 00 74 08 48 89 df e8 d5 8f d2 fe 4c 8b 3b 4c 89 74 24 08 4c 89 f3 48 c1 eb 0c 4d 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 fa 0a 00 00 41 8b 2e 89 ef 89 de e8 52
RSP: 0018:ffffc90001367be0 EFLAGS: 00010247
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888000320000
RDX: 0000000000000000 RSI: 000000000000000d RDI: ffff8880479ec200
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1cfd230 R12: ffff8880479ec200
R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff88808c893000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fd09a526e3a CR3: 000000001f2f8000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 txUpdateMap+0x7da/0x9c0 fs/jfs/jfs_txnmgr.c:2358
 txLazyCommit fs/jfs/jfs_txnmgr.c:2666 [inline]
 jfs_lazycommit+0x43d/0xaa0 fs/jfs/jfs_txnmgr.c:2735
 kthread+0x389/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:diUpdatePMap+0x65/0xe60 fs/jfs/jfs_imap.c:2742
----------------
Code disassembly (best guess):
   0:	03 42 80             	add    -0x80(%rdx),%eax
   3:	3c 28                	cmp    $0x28,%al
   5:	00 74 08 48          	add    %dh,0x48(%rax,%rcx,1)
   9:	89 df                	mov    %ebx,%edi
   b:	e8 d5 8f d2 fe       	call   0xfed28fe5
  10:	4c 8b 3b             	mov    (%rbx),%r15
  13:	4c 89 74 24 08       	mov    %r14,0x8(%rsp)
  18:	4c 89 f3             	mov    %r14,%rbx
  1b:	48 c1 eb 0c          	shr    $0xc,%rbx
  1f:	4d 8d 77 04          	lea    0x4(%r15),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	0f 85 fa 0a 00 00    	jne    0xb31
  37:	41 8b 2e             	mov    (%r14),%ebp
  3a:	89 ef                	mov    %ebp,%edi
  3c:	89 de                	mov    %ebx,%esi
  3e:	e8                   	.byte 0xe8
  3f:	52                   	push   %rdx