Oops: stack segment: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 122 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 RIP: 0010:__list_add_valid_or_report+0x3e/0x130 lib/list_debug.c:29 Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 d2 c3 9d fd 4d 39 34 24 75 71 RSP: 0018:ffffc900039bfa20 EFLAGS: 00010a06 RAX: 0000000000000000 RBX: dead000000000100 RCX: ffff88801e3c9e00 RDX: dead000000000100 RSI: ffffc900031f11a0 RDI: ffff888057a6a3b8 RBP: 1bd5a00000000021 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: dead000000000108 R13: dffffc0000000000 R14: ffffc900031f11a0 R15: ffff888057a6a3b8 FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa315e0da90 CR3: 0000000036528000 CR4: 00000000003526f0 Call Trace: __list_add_valid include/linux/list.h:96 [inline] __list_add include/linux/list.h:158 [inline] list_add include/linux/list.h:177 [inline] dbUpdatePMap+0x7e4/0xeb0 fs/jfs/jfs_dmap.c:577 txAllocPMap+0x57d/0x6b0 fs/jfs/jfs_txnmgr.c:2426 txUpdateMap+0x2a2/0x9c0 fs/jfs/jfs_txnmgr.c:2309 txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline] jfs_lazycommit+0x3f1/0xa10 fs/jfs/jfs_txnmgr.c:2734 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_add_valid_or_report+0x3e/0x130 lib/list_debug.c:29 Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 d2 c3 9d fd 4d 39 34 24 75 71 RSP: 0018:ffffc900039bfa20 EFLAGS: 00010a06 RAX: 0000000000000000 RBX: dead000000000100 RCX: ffff88801e3c9e00 RDX: dead000000000100 RSI: ffffc900031f11a0 RDI: ffff888057a6a3b8 RBP: 1bd5a00000000021 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: dead000000000108 R13: dffffc0000000000 R14: ffffc900031f11a0 R15: ffff888057a6a3b8 FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa315e0da90 CR3: 0000000036528000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: 00 00 add %al,(%rax) 2: 00 48 89 add %cl,-0x77(%rax) 5: d3 48 85 rorl %cl,-0x7b(%rax) 8: d2 0f rorb %cl,(%rdi) a: 84 93 00 00 00 49 test %dl,0x49000000(%rbx) 10: 89 f6 mov %esi,%esi 12: 49 89 ff mov %rdi,%r15 15: 49 bd 00 00 00 00 00 movabs $0xdffffc0000000000,%r13 1c: fc ff df 1f: 4c 8d 63 08 lea 0x8(%rbx),%r12 23: 4c 89 e5 mov %r12,%rbp 26: 48 c1 ed 03 shr $0x3,%rbp * 2a: 42 80 7c 2d 00 00 cmpb $0x0,0x0(%rbp,%r13,1) <-- trapping instruction 30: 74 08 je 0x3a 32: 4c 89 e7 mov %r12,%rdi 35: e8 d2 c3 9d fd call 0xfd9dc40c 3a: 4d 39 34 24 cmp %r14,(%r12) 3e: 75 71 jne 0xb1