list_add corruption. next is NULL.
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:__list_add_valid_or_report+0xc3/0x130
Code: 4c 89 f2 48 89 d9 e8 dc b7 94 fc 90 0f 0b 48 c7 c7 a0 09 bf 8b e8 cd b7 94 fc 90 0f 0b 48 c7 c7 40 0a bf 8b e8 be b7 94 fc 90 <0f> 0b 48 89 df e8 d3 19 71 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8
RSP: 0018:ffffc90003167b08 EFLAGS: 00010046
RAX: 0000000000000022 RBX: 0000000000000000 RCX: 03ecc07bde02c400
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: ffff8881b49368b8 R08: ffff888121224293 R09: 1ffff11024244852
R10: dffffc0000000000 R11: ffffed1024244853 R12: ffffc90002a99340
R13: 0000000000000000 R14: ffff8881b4936968 R15: ffff8881b49368c8
FS:  0000000000000000(0000) GS:ffff88818eb3b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558bcc75c8 CR3: 000000016f66a000 CR4: 00000000000006f0
Call Trace:
 <TASK>
 diUpdatePMap+0x636/0xe60
 txUpdateMap+0x7da/0x9c0
 jfs_lazycommit+0x43f/0xa90
 kthread+0x711/0x8a0
 ret_from_fork+0x4bc/0x870
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_add_valid_or_report+0xc3/0x130
Code: 4c 89 f2 48 89 d9 e8 dc b7 94 fc 90 0f 0b 48 c7 c7 a0 09 bf 8b e8 cd b7 94 fc 90 0f 0b 48 c7 c7 40 0a bf 8b e8 be b7 94 fc 90 <0f> 0b 48 89 df e8 d3 19 71 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8
RSP: 0018:ffffc90003167b08 EFLAGS: 00010046

RAX: 0000000000000022 RBX: 0000000000000000 RCX: 03ecc07bde02c400
RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
RBP: ffff8881b49368b8 R08: ffff888121224293 R09: 1ffff11024244852
R10: dffffc0000000000 R11: ffffed1024244853 R12: ffffc90002a99340
R13: 0000000000000000 R14: ffff8881b4936968 R15: ffff8881b49368c8
FS:  0000000000000000(0000) GS:ffff88818eb3b000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558bcc75c8 CR3: 000000016f66a000 CR4: 00000000000006f0
