program:
syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f52, &(0x7f000000ef80)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x144)
sendfile(r1, r0, 0x0, 0x80000002)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)

[  149.815258][   T45] Bluetooth: hci0: command tx timeout
[  150.377647][ T5338] loop0: detected capacity change from 0 to 32768
[  150.452954][   T25] audit: type=1800 audit(1773104915.155:2): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=4 res=0 errno=0
[  150.565920][ T5339] ==================================================================
[  150.569966][ T5339] BUG: KASAN: slab-use-after-free in release_metapage+0x760/0xac0
[  150.574100][ T5339] Read of size 8 at addr ffff888000b3cdb8 by task syz.0.0/5339
[  150.577769][ T5339] 
[  150.578986][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[  150.579006][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  150.579014][ T5339] Call Trace:
[  150.579024][ T5339]  <TASK>
[  150.579032][ T5339]  dump_stack_lvl+0xe8/0x150
[  150.579057][ T5339]  print_report+0xba/0x230
[  150.579076][ T5339]  ? release_metapage+0x760/0xac0
[  150.579091][ T5339]  kasan_report+0x117/0x150
[  150.579102][ T5339]  ? release_metapage+0x760/0xac0
[  150.579114][ T5339]  release_metapage+0x760/0xac0
[  150.579128][ T5339]  diAllocAG+0x1740/0x1db0
[  150.579144][ T5339]  ? __pfx_diAllocAG+0x10/0x10
[  150.579158][ T5339]  ? dbNextAG+0x52e/0x640
[  150.579166][ T5339]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.579175][ T5339]  diAlloc+0x1d5/0x1680
[  150.579185][ T5339]  ? do_raw_spin_unlock+0x4d/0x210
[  150.579193][ T5339]  ? new_inode+0x150/0x170
[  150.579203][ T5339]  ialloc+0x8c/0x8f0
[  150.579212][ T5339]  jfs_mkdir+0x1e1/0xb00
[  150.579223][ T5339]  ? __pfx_jfs_mkdir+0x10/0x10
[  150.579235][ T5339]  ? make_vfsuid+0x49/0xa0
[  150.579243][ T5339]  ? generic_permission+0x2e4/0x690
[  150.579253][ T5339]  ? inode_permission+0x346/0x5f0
[  150.579261][ T5339]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  150.579273][ T5339]  vfs_mkdir+0x413/0x630
[  150.579282][ T5339]  filename_mkdirat+0x285/0x510
[  150.579290][ T5339]  ? __pfx_filename_mkdirat+0x10/0x10
[  150.579297][ T5339]  ? do_getname+0x151/0x250
[  150.579306][ T5339]  __se_sys_mkdirat+0x35/0x150
[  150.579317][ T5339]  do_syscall_64+0x14d/0xf80
[  150.579384][ T5339]  ? trace_irq_disable+0x3b/0x150
[  150.579399][ T5339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.579411][ T5339]  ? clear_bhb_loop+0x40/0x90
[  150.579421][ T5339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.579433][ T5339] RIP: 0033:0x7fec6879c799
[  150.579444][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.579454][ T5339] RSP: 002b:00007fec64bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  150.579465][ T5339] RAX: ffffffffffffffda RBX: 00007fec68a16090 RCX: 00007fec6879c799
[  150.579472][ T5339] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  150.579479][ T5339] RBP: 00007fec68832bd9 R08: 0000000000000000 R09: 0000000000000000
[  150.579485][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.579491][ T5339] R13: 00007fec68a16128 R14: 00007fec68a16090 R15: 00007fffe9ba8238
[  150.579499][ T5339]  </TASK>
[  150.579502][ T5339] 
[  150.705841][ T5339] Allocated by task 5339:
[  150.707915][ T5339]  kasan_save_track+0x3e/0x80
[  150.710032][ T5339]  __kasan_slab_alloc+0x6c/0x80
[  150.712248][ T5339]  kmem_cache_alloc_noprof+0x2bc/0x650
[  150.714686][ T5339]  mempool_alloc_noprof+0x1ce/0x300
[  150.717193][ T5339]  __get_metapage+0x50c/0xde0
[  150.719578][ T5339]  diAllocAG+0x165d/0x1db0
[  150.721745][ T5339]  diAlloc+0x1d5/0x1680
[  150.724004][ T5339]  ialloc+0x8c/0x8f0
[  150.725854][ T5339]  jfs_mkdir+0x1e1/0xb00
[  150.727723][ T5339]  vfs_mkdir+0x413/0x630
[  150.729633][ T5339]  filename_mkdirat+0x285/0x510
[  150.731975][ T5339]  __se_sys_mkdirat+0x35/0x150
[  150.734475][ T5339]  do_syscall_64+0x14d/0xf80
[  150.737349][ T5339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.740709][ T5339] 
[  150.741752][ T5339] Freed by task 78:
[  150.743499][ T5339]  kasan_save_track+0x3e/0x80
[  150.745707][ T5339]  kasan_save_free_info+0x46/0x50
[  150.748201][ T5339]  __kasan_slab_free+0x5c/0x80
[  150.750533][ T5339]  kmem_cache_free+0x187/0x630
[  150.752818][ T5339]  mempool_free+0xec/0x130
[  150.755121][ T5339]  metapage_release_folio+0x40e/0x540
[  150.757447][ T5339]  shrink_folio_list+0x2226/0x5290
[  150.759574][ T5339]  evict_folios+0x4795/0x5880
[  150.761656][ T5339]  try_to_shrink_lruvec+0xb62/0xfa0
[  150.764383][ T5339]  shrink_one+0x25c/0x710
[  150.766343][ T5339]  shrink_node+0x3197/0x3a90
[  150.768501][ T5339]  kswapd+0x1742/0x2e10
[  150.770371][ T5339]  kthread+0x388/0x470
[  150.772213][ T5339]  ret_from_fork+0x51e/0xb90
[  150.774809][ T5339]  ret_from_fork_asm+0x1a/0x30
[  150.777499][ T5339] 
[  150.778533][ T5339] The buggy address belongs to the object at ffff888000b3cd90
[  150.778533][ T5339]  which belongs to the cache jfs_mp of size 184
[  150.785203][ T5339] The buggy address is located 40 bytes inside of
[  150.785203][ T5339]  freed 184-byte region [ffff888000b3cd90, ffff888000b3ce48)
[  150.792188][ T5339] 
[  150.793526][ T5339] The buggy address belongs to the physical page:
[  150.796636][ T5339] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb3c
[  150.800500][ T5339] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff)
[  150.803867][ T5339] page_type: f5(slab)
[  150.806382][ T5339] raw: 007ff00000000000 ffff8880312a28c0 dead000000000122 0000000000000000
[  150.810809][ T5339] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  150.814337][ T5339] page dumped because: kasan: bad access detected
[  150.817279][ T5339] page_owner tracks the page as allocated
[  150.819918][ T5339] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16945379220, free_ts 0
[  150.829515][ T5339]  post_alloc_hook+0x231/0x280
[  150.831813][ T5339]  get_page_from_freelist+0x24dc/0x2580
[  150.834368][ T5339]  __alloc_frozen_pages_noprof+0x18d/0x380
[  150.837333][ T5339]  allocate_slab+0x77/0x660
[  150.840089][ T5339]  refill_objects+0x331/0x3c0
[  150.842763][ T5339]  __pcs_replace_empty_main+0x2f9/0x5e0
[  150.846029][ T5339]  kmem_cache_alloc_noprof+0x37d/0x650
[  150.848708][ T5339]  mempool_init_node+0x1ea/0x4d0
[  150.850859][ T5339]  mempool_create_node_noprof+0xb8/0x150
[  150.853387][ T5339]  metapage_init+0xed/0x150
[  150.855590][ T5339]  init_jfs_fs+0xfd/0x4e0
[  150.857581][ T5339]  do_one_initcall+0x250/0x8d0
[  150.859979][ T5339]  do_initcall_level+0x104/0x190
[  150.862636][ T5339]  do_initcalls+0x59/0xa0
[  150.864790][ T5339]  kernel_init_freeable+0x2a6/0x3e0
[  150.866804][ T5339]  kernel_init+0x1d/0x1d0
[  150.868816][ T5339] page_owner free stack trace missing
[  150.871022][ T5339] 
[  150.872146][ T5339] Memory state around the buggy address:
[  150.875912][ T5339]  ffff888000b3cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  150.880536][ T5339]  ffff888000b3cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  150.884360][ T5339] >ffff888000b3cd80: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[  150.888047][ T5339]                                         ^
[  150.890840][ T5339]  ffff888000b3ce00: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[  150.895131][ T5339]  ffff888000b3ce80: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  150.899021][ T5339] ==================================================================
[  150.996697][ T5339] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  151.000148][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[  151.004818][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  151.009445][ T5339] Call Trace:
[  151.011050][ T5339]  <TASK>
[  151.012416][ T5339]  vpanic+0x56c/0xa60
[  151.014571][ T5339]  ? __pfx_vpanic+0x10/0x10
[  151.017093][ T5339]  ? __pfx___schedule+0x10/0x10
[  151.019626][ T5339]  panic+0xc5/0xd0
[  151.021316][ T5339]  ? __pfx_panic+0x10/0x10
[  151.023388][ T5339]  ? preempt_schedule_thunk+0x16/0x30
[  151.025789][ T5339]  ? release_metapage+0x760/0xac0
[  151.028394][ T5339]  check_panic_on_warn+0x89/0xb0
[  151.030860][ T5339]  ? release_metapage+0x760/0xac0
[  151.033144][ T5339]  end_report+0x73/0x180
[  151.035105][ T5339]  ? release_metapage+0x760/0xac0
[  151.037299][ T5339]  kasan_report+0x128/0x150
[  151.039428][ T5339]  ? release_metapage+0x760/0xac0
[  151.042227][ T5339]  release_metapage+0x760/0xac0
[  151.045553][ T5339]  diAllocAG+0x1740/0x1db0
[  151.048228][ T5339]  ? __pfx_diAllocAG+0x10/0x10
[  151.050510][ T5339]  ? dbNextAG+0x52e/0x640
[  151.052490][ T5339]  ? do_raw_spin_lock+0x12b/0x2f0
[  151.054749][ T5339]  diAlloc+0x1d5/0x1680
[  151.056739][ T5339]  ? do_raw_spin_unlock+0x4d/0x210
[  151.059120][ T5339]  ? new_inode+0x150/0x170
[  151.061412][ T5339]  ialloc+0x8c/0x8f0
[  151.063605][ T5339]  jfs_mkdir+0x1e1/0xb00
[  151.066072][ T5339]  ? __pfx_jfs_mkdir+0x10/0x10
[  151.068325][ T5339]  ? make_vfsuid+0x49/0xa0
[  151.070278][ T5339]  ? generic_permission+0x2e4/0x690
[  151.072746][ T5339]  ? inode_permission+0x346/0x5f0
[  151.075064][ T5339]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  151.077313][ T5339]  vfs_mkdir+0x413/0x630
[  151.079410][ T5339]  filename_mkdirat+0x285/0x510
[  151.082672][ T5339]  ? __pfx_filename_mkdirat+0x10/0x10
[  151.086772][ T5339]  ? do_getname+0x151/0x250
[  151.089341][ T5339]  __se_sys_mkdirat+0x35/0x150
[  151.091757][ T5339]  do_syscall_64+0x14d/0xf80
[  151.093912][ T5339]  ? trace_irq_disable+0x3b/0x150
[  151.096396][ T5339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.100040][ T5339]  ? clear_bhb_loop+0x40/0x90
[  151.102837][ T5339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.105926][ T5339] RIP: 0033:0x7fec6879c799
[  151.107837][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.117541][ T5339] RSP: 002b:00007fec64bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  151.121617][ T5339] RAX: ffffffffffffffda RBX: 00007fec68a16090 RCX: 00007fec6879c799
[  151.124913][ T5339] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  151.128624][ T5339] RBP: 00007fec68832bd9 R08: 0000000000000000 R09: 0000000000000000
[  151.132943][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.136656][ T5339] R13: 00007fec68a16128 R14: 00007fec68a16090 R15: 00007fffe9ba8238
[  151.140476][ T5339]  </TASK>
[  151.142441][ T5339] Kernel Offset: disabled
[  151.144884][ T5339] Rebooting in 86400 seconds..