kernel BUG in txAbort

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	kernel BUG in txUnlock jfs	C	error		718	3h48m	566d	0/26	upstream: reported C repro on 2022/10/01 14:27
ERROR: (device loop1): diWrite: ixpxd invalid
ERROR: (device loop1): remounting filesystem as read-only
BUG at fs/jfs/jfs_txnmgr.c:2790 assert(mp->nohomeok)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_txnmgr.c:2790!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 10504 Comm: syz-executor.1 Not tainted 6.1.30-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : LogSyncRelease fs/jfs/jfs_txnmgr.c:2790 [inline]
pc : txAbort+0x56c/0x570 fs/jfs/jfs_txnmgr.c:2616
lr : LogSyncRelease fs/jfs/jfs_txnmgr.c:2790 [inline]
lr : txAbort+0x56c/0x570 fs/jfs/jfs_txnmgr.c:2616
sp : ffff8000234971b0
x29: ffff8000234971e0 x28: 0000000000000000 x27: ffff0000dff40000
x26: ffff8000197815a4 x25: 0000000000000000 x24: dfff800000000000
x23: ffff800019781000 x22: 0000000000000003 x21: ffff800015b4e4c0
x20: ffff800019781000 x19: 0000000000000048 x18: ffff800023496d80
x17: 0000000000000000 x16: ffff8000120fc834 x15: 0000000000000000
x14: 0000000000000002 x13: 0000000000000001 x12: 0000000000040000
x11: 000000000001931a x10: ffff8000260de000 x9 : a0aa77c5a039b100
x8 : a0aa77c5a039b100 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800023496ab8 x4 : ffff800015692ac0 x3 : ffff8000085879f4
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000034
Call trace:
 LogSyncRelease fs/jfs/jfs_txnmgr.c:2790 [inline]
 txAbort+0x56c/0x570 fs/jfs/jfs_txnmgr.c:2616
 txCommit+0x496c/0x5574 fs/jfs/jfs_txnmgr.c:1349
 jfs_create+0x828/0xa1c fs/jfs/namei.c:156
 lookup_open fs/namei.c:3413 [inline]
 open_last_lookups fs/namei.c:3481 [inline]
 path_openat+0xeac/0x2548 fs/namei.c:3711
 do_filp_open+0x1bc/0x3cc fs/namei.c:3741
 do_sys_openat2+0x128/0x3d8 fs/open.c:1318
 do_sys_open fs/open.c:1334 [inline]
 __do_sys_openat fs/open.c:1350 [inline]
 __se_sys_openat fs/open.c:1345 [inline]
 __arm64_sys_openat+0x1f0/0x240 fs/open.c:1345
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581
Code: b0045f63 91158063 52815cc2 959583c4 (d4210000) 
---[ end trace 0000000000000000 ]---