BUG at fs/jfs/jfs_dmap.c:2983 assert(n < 4)
------------[ cut here ]------------
kernel BUG at fs/jfs/jfs_dmap.c:2983!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4432 Comm: syz.1.2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:2983
lr : dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:2983
sp : ffff8000213f72d0
x29: ffff8000213f72e0 x28: 0000000000000010 x27: 00000000ffffffff
x26: 0000000000000003 x25: 000000000000000d x24: 0000000000000155
x23: ffff0000f6af9021 x22: 0000000000000000 x21: ffff0000f6af9010
x20: 000000000000000d x19: dfff800000000000 x18: ffff800011a5bd40
x17: 0000000000000000 x16: ffff8000082d3a08 x15: 0000000000000002
x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000
x11: 000000000007ffff x10: ffff80002243a000 x9 : 97e36cdb63a17b00
x8 : 97e36cdb63a17b00 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff8000213f6d98 x4 : ffff800015134e00 x3 : ffff80000a84818c
x2 : ffff00019f73dd10 x1 : 0000000100000000 x0 : 000000000000002b
Call trace:
 dbFindLeaf+0x484/0x488 fs/jfs/jfs_dmap.c:2983
 dbAllocDmapLev+0x74/0x36c fs/jfs/jfs_dmap.c:1969
 dbAlloc+0x78c/0x9dc fs/jfs/jfs_dmap.c:844
 extBalloc fs/jfs/jfs_extent.c:326 [inline]
 extAlloc+0x3f4/0xd64 fs/jfs/jfs_extent.c:122
 jfs_get_block+0x2bc/0x8b8 fs/jfs/inode.c:254
 __block_write_begin_int+0x34c/0x13b8 fs/buffer.c:1991
 __block_write_begin fs/buffer.c:2041 [inline]
 block_write_begin+0x98/0x11c fs/buffer.c:2102
 jfs_write_begin+0x44/0x88 fs/jfs/inode.c:310
 generic_perform_write+0x230/0x4e4 mm/filemap.c:3862
 __generic_file_write_iter+0x130/0x250 mm/filemap.c:3960
 generic_file_write_iter+0xb4/0x2b0 mm/filemap.c:3989
 call_write_iter include/linux/fs.h:2265 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x5ac/0x7c4 fs/read_write.c:584
 ksys_write+0x120/0x210 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:646
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: f0042aa3 91280063 528174e2 95fe9bd6 (d4210000) 
---[ end trace 0000000000000000 ]---