ERROR: (device loop9): diFree: numfree > numinos
------------[ cut here ]------------
kernel BUG at fs/jfs/inode.c:169!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 24859 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:jfs_evict_inode+0x438/0x440
Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 69 e8 fe e9 16 fe ff ff e8 39 fb 84 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc900025efae0 EFLAGS: 00010293
RAX: ffffffff833ab2d7 RBX: ffff8881127b6998 RCX: ffff888121300000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881127b6998
RBP: 0000000000000001 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
R10: dffffc0000000000 R11: ffffffff833a8fd0 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff8881127b6620 R15: ffffffff833aaea0
FS:  0000555566d92500(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bcf72cf000 CR3: 0000000034506000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 evict+0x504/0x9c0
 evict_inodes+0x64c/0x6d0
 generic_shutdown_super+0x9a/0x2c0
 kill_block_super+0x44/0x90
 deactivate_locked_super+0xbc/0x130
 cleanup_mnt+0x425/0x4c0
 task_work_run+0x1d4/0x260
 exit_to_user_mode_loop+0xec/0x110
 do_syscall_64+0x2bd/0x3b0
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f39eed8ff17
Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
RSP: 002b:00007ffdd6bf75c8 EFLAGS: 00000202
 ORIG_RAX: 00000000000000a6
RAX: 0000000000000000 RBX: 00007f39eee11c05 RCX: 00007f39eed8ff17
RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6bf7680
RBP: 00007ffdd6bf7680 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffdd6bf8710
R13: 00007f39eee11c05 R14: 0000000000101de3 R15: 00007ffdd6bf8750
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:jfs_evict_inode+0x438/0x440
Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 69 e8 fe e9 16 fe ff ff e8 39 fb 84 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 0018:ffffc900025efae0 EFLAGS: 00010293
RAX: ffffffff833ab2d7 RBX: ffff8881127b6998 RCX: ffff888121300000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881127b6998
RBP: 0000000000000001 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
R10: dffffc0000000000 R11: ffffffff833a8fd0 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff8881127b6620 R15: ffffffff833aaea0
FS:  0000555566d92500(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055bcf72cf000 CR3: 0000000034506000 CR4: 00000000000006f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
