BUG at fs/jfs/jfs_txnmgr.c:662 assert(last)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_txnmgr.c:662!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 8294 Comm: syz.3.777 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : txLock+0x1694/0x1828 fs/jfs/jfs_txnmgr.c:662
lr : txLock+0x1694/0x1828 fs/jfs/jfs_txnmgr.c:662
sp : ffff8000218c7680
x29: ffff8000218c76b0 x28: 1ffff00004015400 x27: 0000000000000048
x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000002
x23: ffff8000200aa000 x22: ffff8000200aa000 x21: 0000000000000002
x20: ffff8000200aa090 x19: dfff800000000000 x18: ffff800011babf60
x17: 0000000000000000 x16: ffff800011a529a8 x15: 0000000000000002
x14: 0000000000000001 x13: 1ffff00004318e38 x12: 0000000000080000
x11: 000000000003ef14 x10: ffff80002c60b000 x9 : 03b60f3b58b91400
x8 : 03b60f3b58b91400 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000218c7158 x4 : ffff800015324ea0 x3 : ffff80000a893cf0
x2 : ffff00019f51cd10 x1 : 0000000100000000 x0 : 000000000000002b
Call trace:
 txLock+0x1694/0x1828 fs/jfs/jfs_txnmgr.c:662
 diWrite+0x350/0x11e4 fs/jfs/jfs_imap.c:654
 txCommit+0x5e0/0x3bf8 fs/jfs/jfs_txnmgr.c:1256
 jfs_mkdir+0x740/0x910 fs/jfs/namei.c:290
 vfs_mkdir+0x314/0x4d4 fs/namei.c:4114
 do_mkdirat+0x1b8/0x3ec fs/namei.c:4139
 __do_sys_mkdirat fs/namei.c:4154 [inline]
 __se_sys_mkdirat fs/namei.c:4152 [inline]
 __arm64_sys_mkdirat+0x90/0xa8 fs/namei.c:4152
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: b00432c3 910d0063 528052c2 979d4d9b (d4210000) 
---[ end trace 0000000000000000 ]---