list_add corruption. next is NULL. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:28! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:__list_add_valid_or_report+0xba/0xf0 lib/list_debug.c:27 Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 72 b3 49 06 0f 0b 48 c7 c7 60 90 1c 8b e8 64 b3 49 06 0f 0b 48 c7 c7 00 91 1c 8b e8 56 b3 49 06 <0f> 0b 48 c7 c7 60 91 1c 8b 4c 89 f6 48 89 d9 e8 42 b3 49 06 0f 0b RSP: 0018:ffffc90002cf7c70 EFLAGS: 00010046 RAX: 0000000000000022 RBX: 0000000000000000 RCX: 25d3a36073f62c00 RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 RBP: ffff8880260ca6c8 R08: ffffc90002cf7967 R09: 1ffff9200059ef2c R10: dffffc0000000000 R11: fffff5200059ef2d R12: ffffc90002639340 R13: 0000000000000000 R14: ffff8880260ca778 R15: ffff8880260ca6d8 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d910ff8 CR3: 0000000060166000 CR4: 00000000003526e0 Call Trace: __list_add_valid include/linux/list.h:88 [inline] __list_add include/linux/list.h:150 [inline] list_add include/linux/list.h:169 [inline] diUpdatePMap+0x62d/0xe50 fs/jfs/jfs_imap.c:2831 txUpdateMap+0x6c2/0x890 fs/jfs/jfs_txnmgr.c:2357 txLazyCommit fs/jfs/jfs_txnmgr.c:2665 [inline] jfs_lazycommit+0x429/0xa70 fs/jfs/jfs_txnmgr.c:2733 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_add_valid_or_report+0xba/0xf0 lib/list_debug.c:27 Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 72 b3 49 06 0f 0b 48 c7 c7 60 90 1c 8b e8 64 b3 49 06 0f 0b 48 c7 c7 00 91 1c 8b e8 56 b3 49 06 <0f> 0b 48 c7 c7 60 91 1c 8b 4c 89 f6 48 89 d9 e8 42 b3 49 06 0f 0b RSP: 0018:ffffc90002cf7c70 EFLAGS: 00010046 RAX: 0000000000000022 RBX: 0000000000000000 RCX: 25d3a36073f62c00 RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 RBP: ffff8880260ca6c8 R08: ffffc90002cf7967 R09: 1ffff9200059ef2c R10: dffffc0000000000 R11: fffff5200059ef2d R12: ffffc90002639340 R13: 0000000000000000 R14: ffff8880260ca778 R15: ffff8880260ca6d8 FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d910ff8 CR3: 0000000060166000 CR4: 00000000003526e0