------------[ cut here ]------------ WARNING: CPU: 1 PID: 93 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2875 Modules linked in: CPU: 1 PID: 93 Comm: jfsCommit Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2875 lr : dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2875 sp : ffff8000205179e0 x29: ffff8000205179f0 x28: 00000000dff00000 x27: ffff0000d1d5d804 x26: dfff800000000000 x25: ffff0000d1d5d010 x24: 0000000000020056 x23: ffff0000d1d5d018 x22: 0000000000000155 x21: 0000000000000001 x20: 0000000000000004 x19: dfff800000000000 x18: ffff800011b9bf60 x17: ffff80001835a000 x16: ffff8000082d7db8 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffff800068eae8 x12: 0000000000ff0100 x11: ff0080000989d038 x10: 0000000000000000 x9 : ffff80000989d038 x8 : ffff0000c8283780 x7 : ffff8000086f2a84 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000004 x1 : 0000000000000155 x0 : 0000000000020056 Call trace: dbAdjTree+0x3a8/0x414 fs/jfs/jfs_dmap.c:2875 dbJoin+0x1ec/0x2a4 fs/jfs/jfs_dmap.c:2843 dbFreeBits+0x438/0xbb8 fs/jfs/jfs_dmap.c:2340 dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline] dbFree+0x2d4/0x5a8 fs/jfs/jfs_dmap.c:398 txFreeMap+0x640/0xb44 fs/jfs/jfs_txnmgr.c:2535 txUpdateMap+0x294/0x794 fs/jfs/jfs_txnmgr.c:-1 txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline] jfs_lazycommit+0x354/0x908 fs/jfs/jfs_txnmgr.c:2733 kthread+0x250/0x2d8 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 36 hardirqs last enabled at (35): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1374 [inline] hardirqs last enabled at (35): [] finish_lock_switch+0xb0/0x1c4 kernel/sched/core.c:5004 hardirqs last disabled at (36): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (0): [] copy_process+0x12a0/0x36e4 kernel/fork.c:2301 softirqs last disabled at (0): [<0000000000000000>] 0x0 ---[ end trace 0000000000000000 ]---