Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts.
2026/08/22 22:22:37 parsed 1 programs
[ 189.037644][ T6114] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 193.802572][ T4901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 193.806877][ T4901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 193.822825][ T4901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 193.849089][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 193.850103][ T4901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 199.998505][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 199.998581][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 200.889928][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 200.890126][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 200.890293][ T6173] bridge_slave_0: entered allmulticast mode
[ 200.892402][ T6173] bridge_slave_0: entered promiscuous mode
[ 200.895072][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 200.895241][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 200.895384][ T6173] bridge_slave_1: entered allmulticast mode
[ 200.903070][ T6173] bridge_slave_1: entered promiscuous mode
[ 201.217095][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 201.232464][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 201.453764][ T6173] team0: Port device team_slave_0 added
[ 201.456874][ T6173] team0: Port device team_slave_1 added
[ 201.620796][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 201.620818][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 201.620837][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 201.622977][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 201.622996][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 201.623027][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 201.885606][ T6173] hsr_slave_0: entered promiscuous mode
[ 201.886976][ T6173] hsr_slave_1: entered promiscuous mode
[ 204.277847][ T6173] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 204.322467][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 204.324082][ T6173] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 204.381203][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 204.382838][ T6173] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 204.438699][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 204.440551][ T6173] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 204.472769][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 204.704908][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 204.748488][ T6173] 8021q: adding VLAN 0 to HW filter on device team0
[ 204.782412][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 204.784694][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 204.825162][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 204.825284][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 205.723424][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 205.951824][ T6173] veth0_vlan: entered promiscuous mode
[ 206.013908][ T6173] veth1_vlan: entered promiscuous mode
[ 206.097864][ T6173] veth0_macvtap: entered promiscuous mode
[ 206.105360][ T6173] veth1_macvtap: entered promiscuous mode
[ 206.164734][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 206.215373][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 206.439558][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 206.560549][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 206.560601][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 206.560639][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 207.416405][ T1018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 208.076084][ T1018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 208.531045][ T1018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 208.620350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 208.620372][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 208.800836][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 208.800858][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.036717][ T1018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 209.898361][ T1018] bridge_slave_1: left allmulticast mode
[ 209.898399][ T1018] bridge_slave_1: left promiscuous mode
[ 209.898719][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 210.119517][ T1018] bridge_slave_0: left allmulticast mode
[ 210.119554][ T1018] bridge_slave_0: left promiscuous mode
[ 210.119849][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state
2026/08/22 22:23:06 executed programs: 0
[ 210.832044][ T4901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 210.870857][ T4901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 210.875079][ T4901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 210.876293][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 210.888856][ T4901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 211.468788][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 211.548566][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 211.602829][ T1018] bond0 (unregistering): Released all slaves
[ 212.207783][ T1018] hsr_slave_0: left promiscuous mode
[ 212.247902][ T1018] hsr_slave_1: left promiscuous mode
[ 212.249095][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 212.249137][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 212.271239][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 212.271334][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 212.328936][ T1018] veth1_macvtap: left promiscuous mode
[ 212.329013][ T1018] veth0_macvtap: left promiscuous mode
[ 212.329251][ T1018] veth1_vlan: left promiscuous mode
[ 212.329380][ T1018] veth0_vlan: left promiscuous mode
[ 213.007897][ T4901] Bluetooth: hci0: command tx timeout
[ 213.022504][ T1018] team0 (unregistering): Port device team_slave_1 removed
[ 213.068722][ T1018] team0 (unregistering): Port device team_slave_0 removed
[ 214.191129][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1
[ 214.303760][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 214.304003][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 214.304201][ T6370] bridge_slave_0: entered allmulticast mode
[ 214.323193][ T6370] bridge_slave_0: entered promiscuous mode
[ 214.353277][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 214.353733][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 214.357259][ T6370] bridge_slave_1: entered allmulticast mode
[ 214.388582][ T6370] bridge_slave_1: entered promiscuous mode
[ 215.012997][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 215.036861][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 215.078707][ T4901] Bluetooth: hci0: command tx timeout
[ 215.171532][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2
[ 215.316681][ T6370] team0: Port device team_slave_0 added
[ 215.336788][ T6370] team0: Port device team_slave_1 added
[ 215.681587][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 215.681618][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 215.681645][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 215.685254][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 215.685271][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 215.685299][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 216.477388][ T6370] hsr_slave_0: entered promiscuous mode
[ 216.499188][ T6370] hsr_slave_1: entered promiscuous mode
[ 216.521561][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3
[ 217.157946][ T4901] Bluetooth: hci0: command tx timeout
[ 219.192325][ T6370] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 219.230058][ T6370] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 219.231927][ T6370] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 219.237711][ T4901] Bluetooth: hci0: command tx timeout
[ 219.285845][ T6370] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 219.287442][ T6370] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 219.344491][ T6370] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 219.346164][ T6370] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 219.391797][ T6370] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 219.652705][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 219.697367][ T6370] 8021q: adding VLAN 0 to HW filter on device team0
[ 219.713520][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 219.713720][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 219.741477][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 219.744468][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 220.439716][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 220.575164][ T6370] veth0_vlan: entered promiscuous mode
[ 220.601273][ T6370] veth1_vlan: entered promiscuous mode
[ 220.690152][ T6370] veth0_macvtap: entered promiscuous mode
[ 220.722311][ T6370] veth1_macvtap: entered promiscuous mode
[ 220.813707][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 220.832582][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 221.040847][ T1483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.222728][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 221.222750][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 221.245816][ T1018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.297782][ T1018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.297936][ T1483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 221.335852][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 221.335874][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/22 22:23:16 executed programs: 2
[ 221.764416][ T6540] loop0: detected capacity change from 0 to 32768
[ 221.903138][ T6540]
[ 221.903138][ T6540] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 221.903138][ T6540]
[ 221.999106][ T6540] freecnt=0, but freelist=3 in dtroot
[ 221.999106][ T6540]
[ 221.999131][ T6540] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 221.999131][ T6540]
[ 222.000275][ T6540] jfs_lookup: iget failed on inum 32
[ 222.030792][ T6541] freecnt=0, but freelist=3 in dtroot
[ 222.030792][ T6541]
[ 222.030835][ T6541] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 222.030835][ T6541]
[ 222.035756][ T6541] jfs_lookup: iget failed on inum 32
[ 222.117080][ T6540] ERROR: (device loop0): diWrite: ixpxd invalid
[ 222.117080][ T6540]
[ 222.117461][ T6540] ERROR: (device loop0): txCommit:
[ 222.117461][ T6540]
[ 222.162733][ T6542] freecnt=0, but freelist=3 in dtroot
[ 222.162733][ T6542]
[ 222.162750][ T6542] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 222.162750][ T6542]
[ 222.162870][ T6542] jfs_lookup: iget failed on inum 32
[ 222.218271][ T37] audit: type=1800 audit(1787437397.718:2): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 222.321444][ T1502] ERROR: (device loop0): diWrite: ixpxd invalid
[ 222.321444][ T1502]
[ 222.321487][ T1502] ERROR: (device loop0): txCommit:
[ 222.321487][ T1502]
[ 222.321644][ T1502] jfs_write_inode: jfs_commit_inode failed!
[ 222.327023][ T6370]
[ 222.327023][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 222.327023][ T6370]
[ 222.390347][ T6370]
[ 222.390347][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 222.390347][ T6370]
[ 222.916698][ T6544] loop0: detected capacity change from 0 to 32768
[ 222.990198][ T6544]
[ 222.990198][ T6544] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 222.990198][ T6544]
[ 223.002592][ T6544] freecnt=0, but freelist=3 in dtroot
[ 223.002592][ T6544]
[ 223.002651][ T6544] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.002651][ T6544]
[ 223.047169][ T6544] jfs_lookup: iget failed on inum 32
[ 223.065375][ T6545] freecnt=0, but freelist=3 in dtroot
[ 223.065375][ T6545]
[ 223.065400][ T6545] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.065400][ T6545]
[ 223.065528][ T6545] jfs_lookup: iget failed on inum 32
[ 223.101358][ T6544] ERROR: (device loop0): diWrite: ixpxd invalid
[ 223.101358][ T6544]
[ 223.101428][ T6544] ERROR: (device loop0): txCommit:
[ 223.101428][ T6544]
[ 223.106189][ T37] audit: type=1800 audit(1787437398.628:3): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 223.107354][ T6544] freecnt=0, but freelist=3 in dtroot
[ 223.107354][ T6544]
[ 223.107374][ T6544] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.107374][ T6544]
[ 223.116495][ T6544] jfs_lookup: iget failed on inum 32
[ 223.252503][ T1483] ERROR: (device loop0): diWrite: ixpxd invalid
[ 223.252503][ T1483]
[ 223.252550][ T1483] ERROR: (device loop0): txCommit:
[ 223.252550][ T1483]
[ 223.252596][ T1483] jfs_write_inode: jfs_commit_inode failed!
[ 223.341166][ T6370]
[ 223.341166][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 223.341166][ T6370]
[ 223.373714][ T6370]
[ 223.373714][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 223.373714][ T6370]
[ 223.865218][ T6547] loop0: detected capacity change from 0 to 32768
[ 223.903461][ T6547]
[ 223.903461][ T6547] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 223.903461][ T6547]
[ 223.918891][ T6547] freecnt=0, but freelist=3 in dtroot
[ 223.918891][ T6547]
[ 223.918909][ T6547] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.918909][ T6547]
[ 223.919797][ T6547] jfs_lookup: iget failed on inum 32
[ 223.922309][ T6547] freecnt=0, but freelist=3 in dtroot
[ 223.922309][ T6547]
[ 223.922369][ T6547] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.922369][ T6547]
[ 223.922750][ T6547] jfs_lookup: iget failed on inum 32
[ 223.970563][ T6547] ERROR: (device loop0): diWrite: ixpxd invalid
[ 223.970563][ T6547]
[ 223.970751][ T6547] ERROR: (device loop0): txCommit:
[ 223.970751][ T6547]
[ 224.001190][ T37] audit: type=1800 audit(1787437399.528:4): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 224.001716][ T6547] freecnt=0, but freelist=3 in dtroot
[ 224.001716][ T6547]
[ 224.001730][ T6547] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 224.001730][ T6547]
[ 224.002045][ T6547] jfs_lookup: iget failed on inum 32
[ 224.098292][ T1018] ERROR: (device loop0): diWrite: ixpxd invalid
[ 224.098292][ T1018]
[ 224.098333][ T1018] ERROR: (device loop0): txCommit:
[ 224.098333][ T1018]
[ 224.098376][ T1018] jfs_write_inode: jfs_commit_inode failed!
[ 224.136832][ T6370]
[ 224.136832][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 224.136832][ T6370]
[ 224.181668][ T6370]
[ 224.181668][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 224.181668][ T6370]
[ 224.651536][ T6550] loop0: detected capacity change from 0 to 32768
[ 224.665674][ T6550]
[ 224.665674][ T6550] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 224.665674][ T6550]
[ 224.685172][ T6550] freecnt=0, but freelist=3 in dtroot
[ 224.685172][ T6550]
[ 224.685191][ T6550] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 224.685191][ T6550]
[ 224.685626][ T6550] jfs_lookup: iget failed on inum 32
[ 224.686062][ T6550] freecnt=0, but freelist=3 in dtroot
[ 224.686062][ T6550]
[ 224.686074][ T6550] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 224.686074][ T6550]
[ 224.686185][ T6550] jfs_lookup: iget failed on inum 32
[ 224.711464][ T6550] ERROR: (device loop0): diWrite: ixpxd invalid
[ 224.711464][ T6550]
[ 224.711641][ T6550] ERROR: (device loop0): txCommit:
[ 224.711641][ T6550]
[ 224.779111][ T37] audit: type=1800 audit(1787437400.308:5): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 224.779828][ T6551] freecnt=0, but freelist=3 in dtroot
[ 224.779828][ T6551]
[ 224.779843][ T6551] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 224.779843][ T6551]
[ 224.784517][ T6551] jfs_lookup: iget failed on inum 32
[ 224.859714][ T1483] ERROR: (device loop0): diWrite: ixpxd invalid
[ 224.859714][ T1483]
[ 224.859754][ T1483] ERROR: (device loop0): txCommit:
[ 224.859754][ T1483]
[ 224.859796][ T1483] jfs_write_inode: jfs_commit_inode failed!
[ 224.860805][ T6370]
[ 224.860805][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 224.860805][ T6370]
[ 224.861142][ T6370]
[ 224.861142][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 224.861142][ T6370]
[ 225.502209][ T6553] loop0: detected capacity change from 0 to 32768
[ 225.528076][ T6553]
[ 225.528076][ T6553] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 225.528076][ T6553]
[ 225.542262][ T6553] freecnt=0, but freelist=3 in dtroot
[ 225.542262][ T6553]
[ 225.542307][ T6553] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 225.542307][ T6553]
[ 225.558620][ T6553] jfs_lookup: iget failed on inum 32
[ 225.581146][ T6553] freecnt=0, but freelist=3 in dtroot
[ 225.581146][ T6553]
[ 225.581165][ T6553] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 225.581165][ T6553]
[ 225.582049][ T6553] jfs_lookup: iget failed on inum 32
[ 225.583452][ T6553] ERROR: (device loop0): diWrite: ixpxd invalid
[ 225.583452][ T6553]
[ 225.583517][ T6553] ERROR: (device loop0): txCommit:
[ 225.583517][ T6553]
[ 225.585336][ T37] audit: type=1800 audit(1787437401.108:6): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 225.636209][ T6553] freecnt=0, but freelist=3 in dtroot
[ 225.636209][ T6553]
[ 225.636267][ T6553] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 225.636267][ T6553]
[ 225.636650][ T6553] jfs_lookup: iget failed on inum 32
[ 225.768499][ T57] ERROR: (device loop0): diWrite: ixpxd invalid
[ 225.768499][ T57]
[ 225.768544][ T57] ERROR: (device loop0): txCommit:
[ 225.768544][ T57]
[ 225.768591][ T57] jfs_write_inode: jfs_commit_inode failed!
[ 225.770754][ T6370]
[ 225.770754][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 225.770754][ T6370]
[ 225.771156][ T6370]
[ 225.771156][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 225.771156][ T6370]
[ 226.191556][ T6555] loop0: detected capacity change from 0 to 32768
[ 226.215258][ T6555]
[ 226.215258][ T6555] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 226.215258][ T6555]
[ 226.245319][ T6555] freecnt=0, but freelist=3 in dtroot
[ 226.245319][ T6555]
[ 226.245339][ T6555] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 226.245339][ T6555]
[ 226.245770][ T6555] jfs_lookup: iget failed on inum 32
[ 226.246231][ T6555] freecnt=0, but freelist=3 in dtroot
[ 226.246231][ T6555]
[ 226.246243][ T6555] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 226.246243][ T6555]
[ 226.246359][ T6555] jfs_lookup: iget failed on inum 32
[ 226.270544][ T6555] ERROR: (device loop0): diWrite: ixpxd invalid
[ 226.270544][ T6555]
[ 226.270723][ T6555] ERROR: (device loop0): txCommit:
[ 226.270723][ T6555]
[ 226.309718][ T37] audit: type=1800 audit(1787437401.838:7): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 226.349595][ T6556] freecnt=0, but freelist=3 in dtroot
[ 226.349595][ T6556]
[ 226.349614][ T6556] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 226.349614][ T6556]
[ 226.349736][ T6556] jfs_lookup: iget failed on inum 32
2026/08/22 22:23:22 executed programs: 8
[ 226.426966][ T57] ERROR: (device loop0): diWrite: ixpxd invalid
[ 226.426966][ T57]
[ 226.427024][ T57] ERROR: (device loop0): txCommit:
[ 226.427024][ T57]
[ 226.427066][ T57] jfs_write_inode: jfs_commit_inode failed!
[ 226.427421][ T6370]
[ 226.427421][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 226.427421][ T6370]
[ 226.533030][ T6370]
[ 226.533030][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 226.533030][ T6370]
[ 227.041526][ T6558] loop0: detected capacity change from 0 to 32768
[ 227.086929][ T6558]
[ 227.086929][ T6558] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.086929][ T6558]
[ 227.096707][ T6558] freecnt=0, but freelist=3 in dtroot
[ 227.096707][ T6558]
[ 227.096769][ T6558] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.096769][ T6558]
[ 227.109835][ T6558] jfs_lookup: iget failed on inum 32
[ 227.124684][ T6558] freecnt=0, but freelist=3 in dtroot
[ 227.124684][ T6558]
[ 227.124700][ T6558] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.124700][ T6558]
[ 227.124818][ T6558] jfs_lookup: iget failed on inum 32
[ 227.125627][ T6558] ERROR: (device loop0): diWrite: ixpxd invalid
[ 227.125627][ T6558]
[ 227.125681][ T6558] ERROR: (device loop0): txCommit:
[ 227.125681][ T6558]
[ 227.149921][ T37] audit: type=1800 audit(1787437402.678:8): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 227.151636][ T6558] freecnt=0, but freelist=3 in dtroot
[ 227.151636][ T6558]
[ 227.151680][ T6558] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.151680][ T6558]
[ 227.152082][ T6558] jfs_lookup: iget failed on inum 32
[ 227.238290][ T1018] ERROR: (device loop0): diWrite: ixpxd invalid
[ 227.238290][ T1018]
[ 227.238330][ T1018] ERROR: (device loop0): txCommit:
[ 227.238330][ T1018]
[ 227.238384][ T1018] jfs_write_inode: jfs_commit_inode failed!
[ 227.242565][ T6370]
[ 227.242565][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.242565][ T6370]
[ 227.242884][ T6370]
[ 227.242884][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.242884][ T6370]
[ 227.730902][ T6560] loop0: detected capacity change from 0 to 32768
[ 227.790200][ T6560]
[ 227.790200][ T6560] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.790200][ T6560]
[ 227.818512][ T6560] freecnt=0, but freelist=3 in dtroot
[ 227.818512][ T6560]
[ 227.818532][ T6560] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.818532][ T6560]
[ 227.819104][ T6560] jfs_lookup: iget failed on inum 32
[ 227.823632][ T6560] freecnt=0, but freelist=3 in dtroot
[ 227.823632][ T6560]
[ 227.823647][ T6560] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.823647][ T6560]
[ 227.823741][ T6560] jfs_lookup: iget failed on inum 32
[ 227.826573][ T6560] ERROR: (device loop0): diWrite: ixpxd invalid
[ 227.826573][ T6560]
[ 227.826617][ T6560] ERROR: (device loop0): txCommit:
[ 227.826617][ T6560]
[ 227.849948][ T37] audit: type=1800 audit(1787437403.378:9): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 227.851061][ T6560] freecnt=0, but freelist=3 in dtroot
[ 227.851061][ T6560]
[ 227.851093][ T6560] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.851093][ T6560]
[ 227.851472][ T6560] jfs_lookup: iget failed on inum 32
[ 227.989775][ T1502] ERROR: (device loop0): diWrite: ixpxd invalid
[ 227.989775][ T1502]
[ 227.989832][ T1502] ERROR: (device loop0): txCommit:
[ 227.989832][ T1502]
[ 227.989877][ T1502] jfs_write_inode: jfs_commit_inode failed!
[ 227.993364][ T6370]
[ 227.993364][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.993364][ T6370]
[ 227.993746][ T6370]
[ 227.993746][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 227.993746][ T6370]
[ 228.498755][ T6562] loop0: detected capacity change from 0 to 32768
[ 228.535571][ T6562]
[ 228.535571][ T6562] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 228.535571][ T6562]
[ 228.541426][ T6562] freecnt=0, but freelist=3 in dtroot
[ 228.541426][ T6562]
[ 228.541478][ T6562] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 228.541478][ T6562]
[ 228.564314][ T6562] jfs_lookup: iget failed on inum 32
[ 228.565750][ T6562] freecnt=0, but freelist=3 in dtroot
[ 228.565750][ T6562]
[ 228.565785][ T6562] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 228.565785][ T6562]
[ 228.566173][ T6562] jfs_lookup: iget failed on inum 32
[ 228.575410][ T6562] ERROR: (device loop0): diWrite: ixpxd invalid
[ 228.575410][ T6562]
[ 228.575591][ T6562] ERROR: (device loop0): txCommit:
[ 228.575591][ T6562]
[ 228.661740][ T37] audit: type=1800 audit(1787437404.188:10): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 228.662244][ T6562] freecnt=0, but freelist=3 in dtroot
[ 228.662244][ T6562]
[ 228.662256][ T6562] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 228.662256][ T6562]
[ 228.662355][ T6562] jfs_lookup: iget failed on inum 32
[ 228.756002][ T1502] ERROR: (device loop0): diWrite: ixpxd invalid
[ 228.756002][ T1502]
[ 228.756043][ T1502] ERROR: (device loop0): txCommit:
[ 228.756043][ T1502]
[ 228.756085][ T1502] jfs_write_inode: jfs_commit_inode failed!
[ 228.788505][ T6370]
[ 228.788505][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 228.788505][ T6370]
[ 228.788808][ T6370]
[ 228.788808][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 228.788808][ T6370]
[ 229.260317][ T6565] loop0: detected capacity change from 0 to 32768
[ 229.315487][ T6565]
[ 229.315487][ T6565] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 229.315487][ T6565]
[ 229.333634][ T6565] freecnt=0, but freelist=3 in dtroot
[ 229.333634][ T6565]
[ 229.333656][ T6565] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 229.333656][ T6565]
[ 229.335468][ T6565] jfs_lookup: iget failed on inum 32
[ 229.335946][ T6565] freecnt=0, but freelist=3 in dtroot
[ 229.335946][ T6565]
[ 229.335957][ T6565] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 229.335957][ T6565]
[ 229.336052][ T6565] jfs_lookup: iget failed on inum 32
[ 229.337450][ T6565] ERROR: (device loop0): diWrite: ixpxd invalid
[ 229.337450][ T6565]
[ 229.340589][ T6565] ERROR: (device loop0): txCommit:
[ 229.340589][ T6565]
[ 229.361989][ T37] audit: type=1800 audit(1787437404.888:11): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 229.362860][ T6565] freecnt=0, but freelist=3 in dtroot
[ 229.362860][ T6565]
[ 229.362900][ T6565] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 229.362900][ T6565]
[ 229.363267][ T6565] jfs_lookup: iget failed on inum 32
[ 229.498429][ T1018] ERROR: (device loop0): diWrite: ixpxd invalid
[ 229.498429][ T1018]
[ 229.498487][ T1018] ERROR: (device loop0): txCommit:
[ 229.498487][ T1018]
[ 229.498531][ T1018] jfs_write_inode: jfs_commit_inode failed!
[ 229.501275][ T6370]
[ 229.501275][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 229.501275][ T6370]
[ 229.517462][ T6370]
[ 229.517462][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 229.517462][ T6370]
[ 230.024040][ T6567] loop0: detected capacity change from 0 to 32768
[ 230.046128][ T6567]
[ 230.046128][ T6567] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.046128][ T6567]
[ 230.076878][ T6567] freecnt=0, but freelist=3 in dtroot
[ 230.076878][ T6567]
[ 230.076897][ T6567] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.076897][ T6567]
[ 230.100561][ T6567] jfs_lookup: iget failed on inum 32
[ 230.107336][ T6567] freecnt=0, but freelist=3 in dtroot
[ 230.107336][ T6567]
[ 230.107352][ T6567] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.107352][ T6567]
[ 230.132609][ T6567] jfs_lookup: iget failed on inum 32
[ 230.136609][ T6567] ERROR: (device loop0): diWrite: ixpxd invalid
[ 230.136609][ T6567]
[ 230.136670][ T6567] ERROR: (device loop0): txCommit:
[ 230.136670][ T6567]
[ 230.166411][ T6567] freecnt=0, but freelist=3 in dtroot
[ 230.166411][ T6567]
[ 230.166437][ T6567] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.166437][ T6567]
[ 230.166561][ T6567] jfs_lookup: iget failed on inum 32
[ 230.168547][ T37] audit: type=1800 audit(1787437405.688:12): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 230.260540][ T12] ERROR: (device loop0): diWrite: ixpxd invalid
[ 230.260540][ T12]
[ 230.264699][ T12] ERROR: (device loop0): txCommit:
[ 230.264699][ T12]
[ 230.264757][ T12] jfs_write_inode: jfs_commit_inode failed!
[ 230.264971][ T6370]
[ 230.264971][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.264971][ T6370]
[ 230.265335][ T6370]
[ 230.265335][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.265335][ T6370]
[ 230.747013][ T6569] loop0: detected capacity change from 0 to 32768
[ 230.774815][ T6569]
[ 230.774815][ T6569] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.774815][ T6569]
[ 230.799489][ T6569] freecnt=0, but freelist=3 in dtroot
[ 230.799489][ T6569]
[ 230.799507][ T6569] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.799507][ T6569]
[ 230.801521][ T6569] jfs_lookup: iget failed on inum 32
[ 230.806479][ T6569] freecnt=0, but freelist=3 in dtroot
[ 230.806479][ T6569]
[ 230.806497][ T6569] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.806497][ T6569]
[ 230.806617][ T6569] jfs_lookup: iget failed on inum 32
[ 230.861777][ T6569] ERROR: (device loop0): diWrite: ixpxd invalid
[ 230.861777][ T6569]
[ 230.861839][ T6569] ERROR: (device loop0): txCommit:
[ 230.861839][ T6569]
[ 230.887439][ T37] audit: type=1800 audit(1787437406.408:13): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 230.910218][ T6569] freecnt=0, but freelist=3 in dtroot
[ 230.910218][ T6569]
[ 230.910237][ T6569] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 230.910237][ T6569]
[ 230.910361][ T6569] jfs_lookup: iget failed on inum 32
[ 230.958401][ T1018] ERROR: (device loop0): diWrite: ixpxd invalid
[ 230.958401][ T1018]
[ 230.958443][ T1018] ERROR: (device loop0): txCommit:
[ 230.958443][ T1018]
[ 230.958493][ T1018] jfs_write_inode: jfs_commit_inode failed!
[ 230.958859][ T6370]
[ 230.958859][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.958859][ T6370]
[ 230.959489][ T6370]
[ 230.959489][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 230.959489][ T6370]
[ 231.408160][ T6571] loop0: detected capacity change from 0 to 32768
[ 231.436311][ T6571]
[ 231.436311][ T6571] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 231.436311][ T6571]
[ 231.476985][ T6571] freecnt=0, but freelist=3 in dtroot
[ 231.476985][ T6571]
[ 231.477003][ T6571] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 231.477003][ T6571]
[ 231.477423][ T6571] jfs_lookup: iget failed on inum 32
[ 231.481591][ T6571] freecnt=0, but freelist=3 in dtroot
[ 231.481591][ T6571]
[ 231.481759][ T6571] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 231.481759][ T6571]
[ 231.482116][ T6571] jfs_lookup: iget failed on inum 32
[ 231.536415][ T6571] ERROR: (device loop0): diWrite: ixpxd invalid
[ 231.536415][ T6571]
[ 231.536482][ T6571] ERROR: (device loop0): txCommit:
[ 231.536482][ T6571]
[ 231.586663][ T37] audit: type=1800 audit(1787437407.108:14): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 231.587319][ T6571] freecnt=0, but freelist=3 in dtroot
[ 231.587319][ T6571]
[ 231.587333][ T6571] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 231.587333][ T6571]
[ 231.587457][ T6571] jfs_lookup: iget failed on inum 32
2026/08/22 22:23:27 executed programs: 15
[ 231.648326][ T1502] ERROR: (device loop0): diWrite: ixpxd invalid
[ 231.648326][ T1502]
[ 231.648367][ T1502] ERROR: (device loop0): txCommit:
[ 231.648367][ T1502]
[ 231.648410][ T1502] jfs_write_inode: jfs_commit_inode failed!
[ 231.648908][ T6370]
[ 231.648908][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 231.648908][ T6370]
[ 231.649235][ T6370]
[ 231.649235][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 231.649235][ T6370]
[ 232.112122][ T6574] loop0: detected capacity change from 0 to 32768
[ 232.133320][ T6574]
[ 232.133320][ T6574] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 232.133320][ T6574]
[ 232.154236][ T6574] freecnt=0, but freelist=3 in dtroot
[ 232.154236][ T6574]
[ 232.154255][ T6574] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 232.154255][ T6574]
[ 232.154690][ T6574] jfs_lookup: iget failed on inum 32
[ 232.155159][ T6574] freecnt=0, but freelist=3 in dtroot
[ 232.155159][ T6574]
[ 232.155191][ T6574] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 232.155191][ T6574]
[ 232.155305][ T6574] jfs_lookup: iget failed on inum 32
[ 232.160899][ T6574] ERROR: (device loop0): diWrite: ixpxd invalid
[ 232.160899][ T6574]
[ 232.161077][ T6574] ERROR: (device loop0): txCommit:
[ 232.161077][ T6574]
[ 232.231758][ T6575] freecnt=0, but freelist=3 in dtroot
[ 232.231758][ T6575]
[ 232.231774][ T6575] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 232.231774][ T6575]
[ 232.231885][ T6575] jfs_lookup: iget failed on inum 32
[ 232.252091][ T37] audit: type=1800 audit(1787437407.778:15): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.29" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 232.318743][ T1483] ERROR: (device loop0): diWrite: ixpxd invalid
[ 232.318743][ T1483]
[ 232.318783][ T1483] ERROR: (device loop0): txCommit:
[ 232.318783][ T1483]
[ 232.318815][ T1483] jfs_write_inode: jfs_commit_inode failed!
[ 232.329415][ T6370]
[ 232.329415][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 232.329415][ T6370]
[ 232.333531][ T6370]
[ 232.333531][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 232.333531][ T6370]
[ 232.403546][ T1018] ==================================================================
[ 232.403564][ T1018] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.403609][ T1018] Read of size 4096 at addr ffff88804207a000 by task kworker/u8:9/1018
[ 232.403628][ T1018]
[ 232.403659][ T1018] CPU: 1 UID: 0 PID: 1018 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 232.403685][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 232.403699][ T1018] Workqueue: loop0 loop_workfn
[ 232.403743][ T1018] Call Trace:
[ 232.403751][ T1018]
[ 232.403761][ T1018] dump_stack_lvl+0xe8/0x150
[ 232.403794][ T1018] print_address_description+0x55/0x1e0
[ 232.403834][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.403868][ T1018] print_report+0x58/0x70
[ 232.403897][ T1018] kasan_report+0x117/0x150
[ 232.403931][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.403970][ T1018] kasan_check_range+0x264/0x2c0
[ 232.403996][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.404031][ T1018] __asan_memcpy+0x29/0x70
[ 232.404064][ T1018] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.404109][ T1018] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 232.404144][ T1018] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 232.404174][ T1018] ? shmem_write_begin+0x1ce/0x320
[ 232.404197][ T1018] generic_perform_write+0x5a8/0x8b0
[ 232.404237][ T1018] ? __pfx_generic_perform_write+0x10/0x10
[ 232.404270][ T1018] ? generic_write_checks_count+0x426/0x530
[ 232.404297][ T1018] ? file_update_time_flags+0x2db/0x450
[ 232.404331][ T1018] shmem_file_write_iter+0xfb/0x120
[ 232.404358][ T1018] lo_rw_aio+0xc78/0xf30
[ 232.404391][ T1018] ? __pfx_lo_rw_aio+0x10/0x10
[ 232.404418][ T1018] ? kthread_associate_blkcg+0x490/0x600
[ 232.404455][ T1018] ? rt_spin_unlock+0x165/0x200
[ 232.404478][ T1018] loop_process_work+0x638/0x11d0
[ 232.404503][ T1018] ? __lock_acquire+0x683/0x2ce0
[ 232.404543][ T1018] ? __pfx_loop_process_work+0x10/0x10
[ 232.404568][ T1018] ? look_up_lock_class+0x57/0x110
[ 232.404595][ T1018] ? register_lock_class+0x31/0x2e0
[ 232.404620][ T1018] ? __lock_acquire+0x683/0x2ce0
[ 232.404648][ T1018] ? do_raw_spin_lock+0x12b/0x2f0
[ 232.404683][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.404708][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.404735][ T1018] ? rcu_is_watching+0x16/0xb0
[ 232.404762][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.404784][ T1018] process_scheduled_works+0xc3d/0x1630
[ 232.404833][ T1018] ? __pfx_process_scheduled_works+0x10/0x10
[ 232.404862][ T1018] ? assign_work+0x3cf/0x5d0
[ 232.404888][ T1018] worker_thread+0xa47/0xfb0
[ 232.404923][ T1018] ? __kthread_parkme+0x71/0x1f0
[ 232.404955][ T1018] kthread+0x38b/0x470
[ 232.404987][ T1018] ? __pfx_worker_thread+0x10/0x10
[ 232.405012][ T1018] ? __pfx_kthread+0x10/0x10
[ 232.405044][ T1018] ret_from_fork+0x514/0xb70
[ 232.405076][ T1018] ? __pfx_ret_from_fork+0x10/0x10
[ 232.405107][ T1018] ? __switch_to+0xc89/0x1420
[ 232.405135][ T1018] ? __pfx_kthread+0x10/0x10
[ 232.405166][ T1018] ret_from_fork_asm+0x1a/0x30
[ 232.405194][ T1018]
[ 232.405202][ T1018]
[ 232.405207][ T1018] The buggy address belongs to the physical page:
[ 232.405228][ T1018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804207ac80 pfn:0x4207a
[ 232.405249][ T1018] flags: 0x80000000000000(node=0|zone=1)
[ 232.405273][ T1018] raw: 0080000000000000 ffffea0000cc7a08 ffffea0000a90b08 0000000000000000
[ 232.405292][ T1018] raw: ffff88804207ac80 0000000000000000 00000000ffffffff 0000000000000000
[ 232.405303][ T1018] page dumped because: kasan: bad access detected
[ 232.405318][ T1018] page_owner tracks the page as freed
[ 232.405325][ T1018] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 6574, tgid 6573 (syz.0.29), ts 232130551335
[ 232.405355][ T1018] post_alloc_hook+0x1f9/0x250
[ 232.405387][ T1018] get_page_from_freelist+0x2591/0x2600
[ 232.405409][ T1018] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 232.405432][ T1018] alloc_pages_mpol+0xd4/0x280
[ 232.405455][ T1018] alloc_pages_noprof+0xd2/0x2f0
[ 232.405478][ T1018] lmLogInit+0x357/0x1a20
[ 232.405502][ T1018] lmLogOpen+0x4e3/0xf90
[ 232.405525][ T1018] jfs_mount_rw+0xf3/0x670
[ 232.405590][ T1018] jfs_fill_super+0x769/0xda0
[ 232.405608][ T1018] get_tree_bdev_flags+0x430/0x4f0
[ 232.405657][ T1018] vfs_get_tree+0x92/0x2a0
[ 232.405686][ T1018] do_new_mount+0x319/0xdc0
[ 232.405710][ T1018] __se_sys_mount+0x31d/0x420
[ 232.405735][ T1018] do_syscall_64+0x166/0x520
[ 232.405772][ T1018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 232.405792][ T1018] page last free pid 6370 tgid 6370 ts 232403508329 stack trace:
[ 232.405815][ T1018] __free_frozen_pages+0xf8e/0x1070
[ 232.405835][ T1018] lmLogShutdown+0x44e/0x850
[ 232.405861][ T1018] lmLogClose+0x28c/0x530
[ 232.405886][ T1018] jfs_umount+0x2da/0x3b0
[ 232.405908][ T1018] jfs_put_super+0x8c/0x190
[ 232.405922][ T1018] generic_shutdown_super+0x13d/0x2d0
[ 232.405946][ T1018] kill_block_super+0x44/0xa0
[ 232.405975][ T1018] deactivate_locked_super+0xbc/0x110
[ 232.406000][ T1018] cleanup_mnt+0x3d3/0x460
[ 232.406027][ T1018] task_work_run+0x1d9/0x270
[ 232.406043][ T1018] exit_to_user_mode_loop+0x204/0x770
[ 232.406064][ T1018] do_syscall_64+0x328/0x520
[ 232.406089][ T1018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 232.406108][ T1018]
[ 232.406112][ T1018] Memory state around the buggy address:
[ 232.406123][ T1018] ffff888042079f00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 232.406139][ T1018] ffff888042079f80: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 232.406154][ T1018] >ffff88804207a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 232.406165][ T1018] ^
[ 232.406176][ T1018] ffff88804207a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 232.406191][ T1018] ffff88804207a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 232.406202][ T1018] ==================================================================
[ 232.406241][ T1018] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 232.406260][ T1018] CPU: 1 UID: 0 PID: 1018 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 232.406284][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 232.406297][ T1018] Workqueue: loop0 loop_workfn
[ 232.406324][ T1018] Call Trace:
[ 232.406332][ T1018]
[ 232.406341][ T1018] vpanic+0x56d/0xa60
[ 232.406362][ T1018] ? rcu_is_watching+0x16/0xb0
[ 232.406391][ T1018] ? __pfx_vpanic+0x10/0x10
[ 232.406427][ T1018] panic+0xc5/0xd0
[ 232.406457][ T1018] ? __pfx_panic+0x10/0x10
[ 232.406483][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406516][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406541][ T1018] check_panic_on_warn+0x89/0xb0
[ 232.406567][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406591][ T1018] end_report+0x73/0x170
[ 232.406610][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406635][ T1018] kasan_report+0x128/0x150
[ 232.406654][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406683][ T1018] kasan_check_range+0x264/0x2c0
[ 232.406702][ T1018] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406728][ T1018] __asan_memcpy+0x29/0x70
[ 232.406753][ T1018] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 232.406787][ T1018] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 232.406824][ T1018] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 232.406846][ T1018] ? shmem_write_begin+0x1ce/0x320
[ 232.406863][ T1018] generic_perform_write+0x5a8/0x8b0
[ 232.406901][ T1018] ? __pfx_generic_perform_write+0x10/0x10
[ 232.406926][ T1018] ? generic_write_checks_count+0x426/0x530
[ 232.406946][ T1018] ? file_update_time_flags+0x2db/0x450
[ 232.406974][ T1018] shmem_file_write_iter+0xfb/0x120
[ 232.406994][ T1018] lo_rw_aio+0xc78/0xf30
[ 232.407020][ T1018] ? __pfx_lo_rw_aio+0x10/0x10
[ 232.407042][ T1018] ? kthread_associate_blkcg+0x490/0x600
[ 232.407067][ T1018] ? rt_spin_unlock+0x165/0x200
[ 232.407085][ T1018] loop_process_work+0x638/0x11d0
[ 232.407104][ T1018] ? __lock_acquire+0x683/0x2ce0
[ 232.407128][ T1018] ? __pfx_loop_process_work+0x10/0x10
[ 232.407147][ T1018] ? look_up_lock_class+0x57/0x110
[ 232.407169][ T1018] ? register_lock_class+0x31/0x2e0
[ 232.407187][ T1018] ? __lock_acquire+0x683/0x2ce0
[ 232.407210][ T1018] ? do_raw_spin_lock+0x12b/0x2f0
[ 232.407240][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.407261][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.407284][ T1018] ? rcu_is_watching+0x16/0xb0
[ 232.407308][ T1018] ? process_scheduled_works+0x97a/0x1630
[ 232.407330][ T1018] process_scheduled_works+0xc3d/0x1630
[ 232.407363][ T1018] ? __pfx_process_scheduled_works+0x10/0x10
[ 232.407387][ T1018] ? assign_work+0x3cf/0x5d0
[ 232.407409][ T1018] worker_thread+0xa47/0xfb0
[ 232.407438][ T1018] ? __kthread_parkme+0x71/0x1f0
[ 232.407468][ T1018] kthread+0x38b/0x470
[ 232.407498][ T1018] ? __pfx_worker_thread+0x10/0x10
[ 232.407517][ T1018] ? __pfx_kthread+0x10/0x10
[ 232.407541][ T1018] ret_from_fork+0x514/0xb70
[ 232.407566][ T1018] ? __pfx_ret_from_fork+0x10/0x10
[ 232.407590][ T1018] ? __switch_to+0xc89/0x1420
[ 232.407611][ T1018] ? __pfx_kthread+0x10/0x10
[ 232.407635][ T1018] ret_from_fork_asm+0x1a/0x30
[ 232.407665][ T1018]
[ 232.408500][ T1018] Kernel Offset: disabled