------------[ cut here ]------------
WARNING: CPU: 0 PID: 18663 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x310/0x400 fs/jfs/jfs_dmap.c:2875
Modules linked in:
CPU: 0 UID: 0 PID: 18663 Comm: syz.7.2851 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:dbAdjTree+0x310/0x400 fs/jfs/jfs_dmap.c:2875
Code: e8 55 40 75 fe 0f b6 14 24 38 da 0f 85 89 fe ff ff 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 16 46 75 fe e8 11 46 75 fe 90 <0f> 0b 90 eb e2 e8 c6 b8 da fe e9 20 fe ff ff e8 bc b8 da fe e9 47
RSP: 0018:ffffc900045871b8 EFLAGS: 00010283
RAX: 0000000000023443 RBX: 0000000000002057 RCX: ffffc9000da63000
RDX: 0000000000080000 RSI: ffffffff834656bf RDI: 0000000000000004
RBP: ffff8880644b4010 R08: 0000000000000004 R09: 0000000000000155
R10: 0000000000002057 R11: 0000000000000000 R12: 0000000000000155
R13: 0000000000002057 R14: 0000000000000005 R15: 0000000000000002
FS:  00007f26f89ee6c0(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1988b156c0 CR3: 000000005d24a000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 dbSplit+0x133/0x190 fs/jfs/jfs_dmap.c:2648
 dbAllocBits+0x14a/0x630 fs/jfs/jfs_dmap.c:2193
 dbAllocDmap+0x5c/0x110 fs/jfs/jfs_dmap.c:2034
 dbAllocNext+0x346/0x420 fs/jfs/jfs_dmap.c:1171
 dbAlloc+0x32f/0xac0 fs/jfs/jfs_dmap.c:805
 extBalloc fs/jfs/jfs_extent.c:336 [inline]
 extAlloc+0x468/0xf60 fs/jfs/jfs_extent.c:127
 jfs_get_block+0x424/0xb00 fs/jfs/inode.c:248
 __block_write_begin_int+0x4f4/0x16d0 fs/buffer.c:2145
 block_write_begin+0x9a/0x1d0 fs/buffer.c:2256
 jfs_write_begin+0x31/0xe0 fs/jfs/inode.c:300
 generic_perform_write+0x3c5/0x900 mm/filemap.c:4175
 __generic_file_write_iter+0x1ce/0x240 mm/filemap.c:4288
 generic_file_write_iter+0xe1/0x3c0 mm/filemap.c:4318
 iter_file_splice_write+0xa24/0x12e0 fs/splice.c:738
 do_splice_from fs/splice.c:938 [inline]
 direct_splice_actor+0x192/0x6c0 fs/splice.c:1161
 splice_direct_to_actor+0x345/0xa30 fs/splice.c:1105
 do_splice_direct_actor fs/splice.c:1204 [inline]
 do_splice_direct+0x174/0x240 fs/splice.c:1230
 do_sendfile+0xb06/0xe50 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x1d8/0x220 fs/read_write.c:1417
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4e0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f26fa78eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f26f89ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f26fa9e5fa0 RCX: 00007f26fa78eec9
RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
RBP: 00007f26fa811f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f26fa9e6038 R14: 00007f26fa9e5fa0 R15: 00007ffe1efe6818
 </TASK>