loop0: detected capacity change from 0 to 32768
BUG at fs/jfs/jfs_dmap.c:3051 assert(n < 4)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_dmap.c:3051!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4430 Comm: syz-executor.0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:3051
lr : dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:3051
sp : ffff80001f8e7070
x29: ffff80001f8e7080 x28: 0000000000000014 x27: 00000000ffffffff
x26: 0000000000000003 x25: 0000000000000011 x24: 0000000000000155
x23: ffff0000ced90021 x22: 0000000000000000 x21: ffff0000ced90010
x20: 0000000000000011 x19: dfff800000000000 x18: 0000000000000002
x17: ffff800016e33000 x16: ffff80001125a830 x15: ffff800016913500
x14: 0000000000000001 x13: 1fffe000341f5ed7 x12: 0000000000ff0100
x11: 0000000000000000 x10: 0000000000000000 x9 : b8244253b2668600
x8 : b8244253b2668600 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a75e82c
x2 : ffff0001a0fa3d50 x1 : 0000000100000000 x0 : 000000000000002b
Call trace:
 dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:3051
 dbAllocDmapLev+0x74/0x36c fs/jfs/jfs_dmap.c:2037
 dbAllocCtl+0x130/0x900 fs/jfs/jfs_dmap.c:1893
 dbAllocAG+0x1c0/0xdc0 fs/jfs/jfs_dmap.c:1421
 dbAlloc+0x43c/0x978 fs/jfs/jfs_dmap.c:877
 extBalloc fs/jfs/jfs_extent.c:523 [inline]
 extAlloc+0x414/0xe00 fs/jfs/jfs_extent.c:125
 jfs_get_block+0x2c4/0x8ec fs/jfs/inode.c:264
 nobh_write_begin+0x2d8/0x9cc fs/buffer.c:2650
 jfs_write_begin+0x58/0xa0 fs/jfs/inode.c:328
 generic_perform_write+0x208/0x488 mm/filemap.c:3785
 __generic_file_write_iter+0x23c/0x454 mm/filemap.c:3912
 generic_file_write_iter+0xb0/0x1b4 mm/filemap.c:3944
 do_iter_readv_writev+0x3a8/0x50c fs/read_write.c:-1
 do_iter_write+0x1c4/0x670 fs/read_write.c:855
 vfs_writev fs/read_write.c:928 [inline]
 do_pwritev+0x1e8/0x338 fs/read_write.c:1025
 __do_sys_pwritev2 fs/read_write.c:1084 [inline]
 __se_sys_pwritev2 fs/read_write.c:1075 [inline]
 __arm64_sys_pwritev2+0xd4/0x108 fs/read_write.c:1075
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:181
 el0_svc+0x78/0x1d0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: f003fa43 91370063 52817d62 95e74f98 (d4210000) 
---[ end trace 552b4d2e3b766f80 ]---