wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
JFS: discard option not supported on device
JFS: discard option not supported on device
INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 0 PID: 898 Comm: jfsCommit Not tainted 4.19.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x87/0xba lib/dump_stack.c:113
 assign_lock_key kernel/locking/lockdep.c:727 [inline]
 register_lock_class+0x4cc/0x4e0 kernel/locking/lockdep.c:753
 __lock_acquire.isra.10+0x75/0x680 kernel/locking/lockdep.c:3299
 lock_acquire+0xc2/0x160 kernel/locking/lockdep.c:3900
 __mutex_lock_common kernel/locking/mutex.c:925 [inline]
 __mutex_lock+0x5d/0x6d0 kernel/locking/mutex.c:1072
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 diFree+0x91/0xbd0 fs/jfs/jfs_imap.c:900
 jfs_evict_inode+0x77/0xa0 fs/jfs/inode.c:164
 evict+0xcf/0x1a0 fs/inode.c:558
 iput_final fs/inode.c:1547 [inline]
 iput fs/inode.c:1573 [inline]
 iput+0x15a/0x210 fs/inode.c:1559
 txUpdateMap+0x2c4/0x2d0 fs/jfs/jfs_txnmgr.c:2413
 txLazyCommit fs/jfs/jfs_txnmgr.c:2710 [inline]
 jfs_lazycommit+0x210/0x350 fs/jfs/jfs_txnmgr.c:2778
 kthread+0x11c/0x140 kernel/kthread.c:246
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413
ERROR: (device loop0): diFree: numfree > numinos

JFS: discard option not supported on device
JFS: discard option not supported on device
general protection fault: 0000 [#1] SMP PTI
CPU: 0 PID: 898 Comm: jfsCommit Not tainted 4.19.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
RIP: 0010:mutex_can_spin_on_owner kernel/locking/mutex.c:578 [inline]
RIP: 0010:mutex_optimistic_spin kernel/locking/mutex.c:622 [inline]
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:928 [inline]
RIP: 0010:__mutex_lock+0x422/0x6d0 kernel/locking/mutex.c:1072
Code: 68 88 b4 d7 81 45 31 c9 45 31 c0 31 d2 31 f6 b9 02 00 00 00 48 c7 c7 60 d2 86 82 e8 08 a6 38 ff 49 8b 06 5b 48 83 e0 f8 74 2d <44> 8b 58 38 45 85 db 0f 84 56 01 00 00 48 83 3d 59 1b ad 00 00 8b
RSP: 0018:ffffc90002d0bbe0 EFLAGS: 00010286
RAX: 9050a0dfbb0f6cb8 RBX: ffffffff81d7b488 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286
RBP: ffffc90002d0bc90 R08: 0000000000000000 R09: 0000000000000000
R10: ffff880232de5b00 R11: 0000000000000000 R12: ffff880232de5b00
R13: 0000000000000002 R14: ffff88022b5508a8 R15: ffffffff82a19c98
FS:  0000000000000000(0000) GS:ffff880237a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb1a857818 CR3: 000000022f63c000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 diFree+0x91/0xbd0 fs/jfs/jfs_imap.c:900
 jfs_evict_inode+0x77/0xa0 fs/jfs/inode.c:164
 evict+0xcf/0x1a0 fs/inode.c:558
 iput_final fs/inode.c:1547 [inline]
 iput fs/inode.c:1573 [inline]
 iput+0x15a/0x210 fs/inode.c:1559
 txUpdateMap+0x2c4/0x2d0 fs/jfs/jfs_txnmgr.c:2413
 txLazyCommit fs/jfs/jfs_txnmgr.c:2710 [inline]
 jfs_lazycommit+0x210/0x350 fs/jfs/jfs_txnmgr.c:2778
 kthread+0x11c/0x140 kernel/kthread.c:246
 ret_from_fork+0x35/0x40 arch/x86/entry/entry_64.S:413
Modules linked in:
---[ end trace 1a43e361346ac6a3 ]---
RIP: 0010:mutex_can_spin_on_owner kernel/locking/mutex.c:578 [inline]
RIP: 0010:mutex_optimistic_spin kernel/locking/mutex.c:622 [inline]
RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:928 [inline]
RIP: 0010:__mutex_lock+0x422/0x6d0 kernel/locking/mutex.c:1072
Code: 68 88 b4 d7 81 45 31 c9 45 31 c0 31 d2 31 f6 b9 02 00 00 00 48 c7 c7 60 d2 86 82 e8 08 a6 38 ff 49 8b 06 5b 48 83 e0 f8 74 2d <44> 8b 58 38 45 85 db 0f 84 56 01 00 00 48 83 3d 59 1b ad 00 00 8b
RSP: 0018:ffffc90002d0bbe0 EFLAGS: 00010286
RAX: 9050a0dfbb0f6cb8 RBX: ffffffff81d7b488 RCX: 0000000000000002
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286
RBP: ffffc90002d0bc90 R08: 0000000000000000 R09: 0000000000000000
R10: ffff880232de5b00 R11: 0000000000000000 R12: ffff880232de5b00
R13: 0000000000000002 R14: ffff88022b5508a8 R15: ffffffff82a19c98
FS:  0000000000000000(0000) GS:ffff880237a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007feb1a857818 CR3: 000000022f63c000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	68 88 b4 d7 81       	push   $0xffffffff81d7b488
   5:	45 31 c9             	xor    %r9d,%r9d
   8:	45 31 c0             	xor    %r8d,%r8d
   b:	31 d2                	xor    %edx,%edx
   d:	31 f6                	xor    %esi,%esi
   f:	b9 02 00 00 00       	mov    $0x2,%ecx
  14:	48 c7 c7 60 d2 86 82 	mov    $0xffffffff8286d260,%rdi
  1b:	e8 08 a6 38 ff       	call   0xff38a628
  20:	49 8b 06             	mov    (%r14),%rax
  23:	5b                   	pop    %rbx
  24:	48 83 e0 f8          	and    $0xfffffffffffffff8,%rax
  28:	74 2d                	je     0x57
* 2a:	44 8b 58 38          	mov    0x38(%rax),%r11d <-- trapping instruction
  2e:	45 85 db             	test   %r11d,%r11d
  31:	0f 84 56 01 00 00    	je     0x18d
  37:	48 83 3d 59 1b ad 00 	cmpq   $0x0,0xad1b59(%rip)        # 0xad1b98
  3e:	00
  3f:	8b                   	.byte 0x8b