wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
BUG: unable to handle kernel paging request at ffff88022de0f077
PGD 4001067 P4D 4001067 PUD 234afc063 PMD 22de32063 PTE 800000022de0f161
Oops: 0003 [#1] SMP
CPU: 0 PID: 908 Comm: jfsCommit Not tainted 4.19.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:dbAdjTree+0x13/0xc0 fs/jfs/jfs_dmap.c:2915
Code: 82 48 89 e5 e8 ae 51 e9 ff 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 03 77 08 48 63 c6 0f be 4c 07 11 39 d1 0f 84 a5 00 00 00 <88> 54 07 11 44 8b 47 0c 45 85 c0 0f 84 94 00 00 00 8d 56 ff 83 e2
RSP: 0018:ffffc90002bd7ca8 EFLAGS: 00010297
RAX: 0000000000030056 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000030056 RDI: ffff88022dddf010
RBP: ffffc90002bd7cd8 R08: ffff88022dddf000 R09: 000000008a67b774
R10: ffffffff8286c260 R11: ffff880234ee6338 R12: 0000000000000004
R13: 0000000000000001 R14: 0000000000000001 R15: ffff88022dddf010
FS:  0000000000000000(0000) GS:ffff880237a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88022de0f077 CR3: 000000022ed45000 CR4: 0000000000340ef0
Call Trace:
 dbFreeBits+0xab/0x290 fs/jfs/jfs_dmap.c:2378
 dbFreeDmap+0x27/0xa0 fs/jfs/jfs_dmap.c:2127
 dbFree+0xb8/0x210 fs/jfs/jfs_dmap.c:385
 txFreeMap+0x266/0x330 fs/jfs/jfs_txnmgr.c:2580
 txUpdateMap+0x10a/0x2d0 fs/jfs/jfs_txnmgr.c:2376
 txLazyCommit fs/jfs/jfs_txnmgr.c:2710 [inline]
 jfs_lazycommit+0x210/0x350 fs/jfs/jfs_txnmgr.c:2778
 kthread+0x119/0x130 kernel/kthread.c:246
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:413
Modules linked in:
CR2: ffff88022de0f077
---[ end trace d5a679fbf8b64e74 ]---
RIP: 0010:dbAdjTree+0x13/0xc0 fs/jfs/jfs_dmap.c:2915
Code: 82 48 89 e5 e8 ae 51 e9 ff 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 03 77 08 48 63 c6 0f be 4c 07 11 39 d1 0f 84 a5 00 00 00 <88> 54 07 11 44 8b 47 0c 45 85 c0 0f 84 94 00 00 00 8d 56 ff 83 e2
RSP: 0018:ffffc90002bd7ca8 EFLAGS: 00010297
RAX: 0000000000030056 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000004 RSI: 0000000000030056 RDI: ffff88022dddf010
RBP: ffffc90002bd7cd8 R08: ffff88022dddf000 R09: 000000008a67b774
R10: ffffffff8286c260 R11: ffff880234ee6338 R12: 0000000000000004
R13: 0000000000000001 R14: 0000000000000001 R15: ffff88022dddf010
FS:  0000000000000000(0000) GS:ffff880237a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff88022de0f077 CR3: 000000022ed45000 CR4: 0000000000340ef0
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	48 89 e5             	mov    %rsp,%rbp
   3:	e8 ae 51 e9 ff       	call   0xffe951b6
   8:	5d                   	pop    %rbp
   9:	c3                   	ret
   a:	90                   	nop
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	03 77 08             	add    0x8(%rdi),%esi
  19:	48 63 c6             	movslq %esi,%rax
  1c:	0f be 4c 07 11       	movsbl 0x11(%rdi,%rax,1),%ecx
  21:	39 d1                	cmp    %edx,%ecx
  23:	0f 84 a5 00 00 00    	je     0xce
* 29:	88 54 07 11          	mov    %dl,0x11(%rdi,%rax,1) <-- trapping instruction
  2d:	44 8b 47 0c          	mov    0xc(%rdi),%r8d
  31:	45 85 c0             	test   %r8d,%r8d
  34:	0f 84 94 00 00 00    	je     0xce
  3a:	8d 56 ff             	lea    -0x1(%rsi),%edx
  3d:	83                   	.byte 0x83
  3e:	e2                   	.byte 0xe2