BUG at fs/jfs/jfs_dmap.c:2986 assert(n < 4)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_dmap.c:2986!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 6961 Comm: syz.4.438 Not tainted 6.1.134-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dbFindLeaf+0x4a4/0x4a8 fs/jfs/jfs_dmap.c:2986
lr : dbFindLeaf+0x4a4/0x4a8 fs/jfs/jfs_dmap.c:2986
sp : ffff800021d87130
x29: ffff800021d87140 x28: 00000000ffffffff x27: 0000000000000024
x26: dfff800000000000 x25: 0000000000000003 x24: 0000000000000021
x23: 0000000000000555 x22: 0000000000000000 x21: ffff0000e1d0b000
x20: 0000000000000400 x19: 0000000000000022 x18: ffff800021d86700
x17: 0000000000000000 x16: ffff80001226b580 x15: 0000000000000002
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000
x11: 000000000007ffff x10: ffff800028e89000 x9 : 8681d7af9d8ffb00
x8 : 8681d7af9d8ffb00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800021d86a38 x4 : ffff800015bd53e0 x3 : ffff80000834ade0
x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000002b
Call trace:
 dbFindLeaf+0x4a4/0x4a8 fs/jfs/jfs_dmap.c:2986
 dbFindCtl+0x24c/0x520 fs/jfs/jfs_dmap.c:1722
 dbAllocAny fs/jfs/jfs_dmap.c:1532 [inline]
 dbAlloc+0x588/0xb68 fs/jfs/jfs_dmap.c:889
 extBalloc fs/jfs/jfs_extent.c:326 [inline]
 extAlloc+0x404/0xdec fs/jfs/jfs_extent.c:122
 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248
 __block_write_begin_int+0x340/0x13b4 fs/buffer.c:1991
 __block_write_begin fs/buffer.c:2041 [inline]
 block_write_begin+0x98/0x11c fs/buffer.c:2102
 jfs_write_begin+0x44/0x88 fs/jfs/inode.c:304
 generic_perform_write+0x278/0x55c mm/filemap.c:3845
 __generic_file_write_iter+0x168/0x388 mm/filemap.c:3973
 generic_file_write_iter+0xb8/0x2b4 mm/filemap.c:4005
 call_write_iter include/linux/fs.h:2265 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x610/0x91c fs/read_write.c:584
 ksys_pwrite64 fs/read_write.c:699 [inline]
 __do_sys_pwrite64 fs/read_write.c:709 [inline]
 __se_sys_pwrite64 fs/read_write.c:706 [inline]
 __arm64_sys_pwrite64+0x188/0x220 fs/read_write.c:706
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 90046e63 91368063 52817542 959705d5 (d4210000) 
---[ end trace 0000000000000000 ]---