kworker/u8:3: attempt to access beyond end of device loop2: rw=2049, sector=43304, nr_sectors = 8 limit=32768 ERROR: (device loop2): dbAlloc: the hint is outside the map kworker/u8:3: attempt to access beyond end of device loop2: rw=2049, sector=43304, nr_sectors = 8 limit=32768 BUG at fs/jfs/jfs_txnmgr.c:662 assert(last) ------------[ cut here ]------------ kernel BUG at fs/jfs/jfs_txnmgr.c:662! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: writeback wb_workfn (flush-7:2) RIP: 0010:txLock+0x1b79/0x1cb0 fs/jfs/jfs_txnmgr.c:662 Code: e9 6a f8 ff ff e8 97 03 81 fe 48 c7 c7 a0 4a 24 8b 48 c7 c6 99 46 24 8b ba 96 02 00 00 48 c7 c1 a0 4b 24 8b e8 98 92 e9 fd 90 <0f> 0b e8 70 03 81 fe 48 c7 c7 60 4c 24 8b e8 84 92 e9 fd 48 c7 c7 RSP: 0018:ffffc9000124ee40 EFLAGS: 00010246 RAX: 000000000000002b RBX: 0000000000000000 RCX: e00080a3b2b19300 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000124ef68 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92000694400 R13: ffffc900034a2000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9e90fded00 CR3: 0000000035cf2000 CR4: 00000000003526f0 Call Trace: diWrite+0x444/0x1f40 fs/jfs/jfs_imap.c:654 txCommit+0x852/0x5430 fs/jfs/jfs_txnmgr.c:1256 jfs_commit_inode+0x2ef/0x530 fs/jfs/inode.c:114 jfs_write_inode+0x145/0x220 fs/jfs/inode.c:138 write_inode fs/fs-writeback.c:1564 [inline] __writeback_single_inode+0x6f4/0x1000 fs/fs-writeback.c:1784 writeback_sb_inodes+0x6b7/0xf60 fs/fs-writeback.c:2015 wb_writeback+0x43b/0xaf0 fs/fs-writeback.c:2195 wb_do_writeback fs/fs-writeback.c:2342 [inline] wb_workfn+0x40e/0xf00 fs/fs-writeback.c:2382 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:txLock+0x1b79/0x1cb0 fs/jfs/jfs_txnmgr.c:662 Code: e9 6a f8 ff ff e8 97 03 81 fe 48 c7 c7 a0 4a 24 8b 48 c7 c6 99 46 24 8b ba 96 02 00 00 48 c7 c1 a0 4b 24 8b e8 98 92 e9 fd 90 <0f> 0b e8 70 03 81 fe 48 c7 c7 60 4c 24 8b e8 84 92 e9 fd 48 c7 c7 RSP: 0018:ffffc9000124ee40 EFLAGS: 00010246 RAX: 000000000000002b RBX: 0000000000000000 RCX: e00080a3b2b19300 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000124ef68 R08: 0000000000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92000694400 R13: ffffc900034a2000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9e90fded00 CR3: 0000000035cf2000 CR4: 00000000003526f0