program: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x443a, &(0x7f0000004480)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x11, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x11a) pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) ioctl$FITRIM(r4, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) r6 = dup(r5) pwritev2(r6, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0xd8c1, 0x0, 0x0) copy_file_range(r5, 0x0, r6, &(0x7f0000000640)=0xd000, 0xd000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000003c0)={[{@inode32}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65]}}]}) [ 75.194081][ T4692] Bluetooth: hci0: command tx timeout [ 75.550166][ T5341] loop0: detected capacity change from 0 to 32768 [ 75.564166][ T5341] ======================================================= [ 75.564166][ T5341] WARNING: The mand mount option has been deprecated and [ 75.564166][ T5341] and is ignored by this kernel. Remove the mand [ 75.564166][ T5341] option from the mount to silence this warning. [ 75.564166][ T5341] ======================================================= [ 75.645919][ T5341] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 75.701498][ T5341] ================================================================== [ 75.704908][ T5341] BUG: KASAN: slab-out-of-bounds in ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 75.708308][ T5341] Read of size 4 at addr ffff88804342c020 by task syz.0.0/5341 [ 75.711567][ T5341] [ 75.712734][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 75.712751][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.712764][ T5341] Call Trace: [ 75.712772][ T5341] [ 75.712778][ T5341] dump_stack_lvl+0x189/0x250 [ 75.712797][ T5341] ? __kasan_check_byte+0x12/0x40 [ 75.712820][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.712834][ T5341] ? lock_release+0x4b/0x3e0 [ 75.712848][ T5341] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.712863][ T5341] print_report+0xca/0x230 [ 75.712872][ T5341] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 75.712889][ T5341] kasan_report+0x118/0x150 [ 75.712904][ T5341] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 75.712922][ T5341] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 75.712940][ T5341] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 75.712956][ T5341] ? __pfx_start_this_handle+0x10/0x10 [ 75.712982][ T5341] __ocfs2_claim_clusters+0x303/0x8f0 [ 75.712997][ T5341] ? trace_jbd2_handle_start+0x8a/0x220 [ 75.713008][ T5341] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 75.713023][ T5341] ? ocfs2_start_trans+0x495/0x6d0 [ 75.713040][ T5341] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 75.713063][ T5341] ocfs2_reserve_suballoc_bits+0xf1e/0x4640 [ 75.713082][ T5341] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 75.713540][ T5341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.713558][ T5341] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 75.713574][ T5341] ? stack_depot_save_flags+0x429/0x900 [ 75.713596][ T5341] ? kasan_save_track+0x4f/0x80 [ 75.713609][ T5341] ? kasan_save_track+0x3e/0x80 [ 75.713619][ T5341] ? __kasan_kmalloc+0x93/0xb0 [ 75.713630][ T5341] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 75.713644][ T5341] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 75.713660][ T5341] ? ocfs2_lock_allocators+0x29e/0x5c0 [ 75.713674][ T5341] ? ocfs2_extend_allocation+0x39b/0x17a0 [ 75.713686][ T5341] ? ocfs2_allocate_unwritten_extents+0x2e9/0x7b0 [ 75.713699][ T5341] ? __ocfs2_change_file_space+0x901/0xe80 [ 75.713717][ T5341] ? ocfs2_fallocate+0x1f5/0x240 [ 75.713730][ T5341] ? vfs_fallocate+0x6a3/0x830 [ 75.713749][ T5341] ? __x64_sys_fallocate+0xc0/0x110 [ 75.713767][ T5341] ? do_syscall_64+0xfa/0x3b0 [ 75.713778][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.713800][ T5341] ? __kasan_kmalloc+0x93/0xb0 [ 75.713821][ T5341] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 75.713838][ T5341] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 75.713857][ T5341] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 75.713873][ T5341] ? ocfs2_num_free_extents+0x347/0x620 [ 75.713888][ T5341] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 75.713903][ T5341] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 75.713920][ T5341] ocfs2_lock_allocators+0x29e/0x5c0 [ 75.713938][ T5341] ? __pfx_ocfs2_lock_allocators+0x10/0x10 [ 75.713954][ T5341] ? ocfs2_read_inode_block+0x11d/0x190 [ 75.713969][ T5341] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 75.713987][ T5341] ocfs2_extend_allocation+0x39b/0x17a0 [ 75.713999][ T5341] ? ocfs2_search_extent_list+0x1b7/0x220 [ 75.714018][ T5341] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 75.714031][ T5341] ? __pfx_ocfs2_extend_allocation+0x10/0x10 [ 75.714044][ T5341] ? ocfs2_read_inode_block+0x11d/0x190 [ 75.714059][ T5341] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 75.714075][ T5341] ? __brelse+0x59/0xa0 [ 75.714089][ T5341] ? ocfs2_get_clusters+0x2b3/0xa70 [ 75.714101][ T5341] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 75.714112][ T5341] ? do_raw_spin_unlock+0x4d/0x240 [ 75.714128][ T5341] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 75.714142][ T5341] ? __lock_acquire+0xab9/0xd20 [ 75.714152][ T5341] ocfs2_allocate_unwritten_extents+0x2e9/0x7b0 [ 75.714165][ T5341] ? __pfx_ocfs2_allocate_unwritten_extents+0x10/0x10 [ 75.714177][ T5341] ? inode_dio_wait+0x19e/0x240 [ 75.714188][ T5341] ? down_write+0x162/0x1f0 [ 75.714200][ T5341] ? __pfx_down_write+0x10/0x10 [ 75.714213][ T5341] ? do_raw_spin_unlock+0x4d/0x240 [ 75.714228][ T5341] __ocfs2_change_file_space+0x901/0xe80 [ 75.714243][ T5341] ? __pfx___ocfs2_change_file_space+0x10/0x10 [ 75.714258][ T5341] ? __lock_acquire+0xab9/0xd20 [ 75.714274][ T5341] ocfs2_fallocate+0x1f5/0x240 [ 75.714291][ T5341] vfs_fallocate+0x6a3/0x830 [ 75.714302][ T5341] ? __fget_files+0x2a/0x420 [ 75.714318][ T5341] ? __pfx_vfs_fallocate+0x10/0x10 [ 75.714332][ T5341] ? __fget_files+0x2a/0x420 [ 75.714349][ T5341] __x64_sys_fallocate+0xc0/0x110 [ 75.714363][ T5341] do_syscall_64+0xfa/0x3b0 [ 75.714374][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.714384][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.714395][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 75.714407][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.714418][ T5341] RIP: 0033:0x7fa2b178e9a9 [ 75.714430][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.714440][ T5341] RSP: 002b:00007fa2b2589038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 75.714454][ T5341] RAX: ffffffffffffffda RBX: 00007fa2b19b5fa0 RCX: 00007fa2b178e9a9 [ 75.714462][ T5341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 75.714468][ T5341] RBP: 00007fa2b1810d69 R08: 0000000000000000 R09: 0000000000000000 [ 75.714475][ T5341] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000000 [ 75.714482][ T5341] R13: 0000000000000000 R14: 00007fa2b19b5fa0 R15: 00007ffff7c0c0f8 [ 75.714494][ T5341] [ 75.714498][ T5341] [ 75.962089][ T5341] Allocated by task 5320: [ 75.963886][ T5341] kasan_save_track+0x3e/0x80 [ 75.965853][ T5341] __kasan_kmalloc+0x93/0xb0 [ 75.967917][ T5341] __kmalloc_cache_noprof+0x230/0x3d0 [ 75.970345][ T5341] ref_tracker_alloc+0x133/0x460 [ 75.972716][ T5341] batadv_hard_if_event+0x122c/0x1a50 [ 75.975168][ T5341] notifier_call_chain+0x1b3/0x3e0 [ 75.977405][ T5341] register_netdevice+0x1608/0x1ae0 [ 75.980067][ T5341] macsec_newlink+0x6be/0x11b0 [ 75.982464][ T5341] rtnl_newlink_create+0x310/0xb00 [ 75.984794][ T5341] rtnl_newlink+0x16d6/0x1c70 [ 75.987125][ T5341] rtnetlink_rcv_msg+0x7cf/0xb70 [ 75.989480][ T5341] netlink_rcv_skb+0x208/0x470 [ 75.991902][ T5341] netlink_unicast+0x759/0x8e0 [ 75.993866][ T5341] netlink_sendmsg+0x805/0xb30 [ 75.995706][ T5341] __sock_sendmsg+0x21c/0x270 [ 75.997583][ T5341] __sys_sendto+0x3bd/0x520 [ 75.999369][ T5341] __x64_sys_sendto+0xde/0x100 [ 76.001265][ T5341] do_syscall_64+0xfa/0x3b0 [ 76.003173][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.005633][ T5341] [ 76.006622][ T5341] The buggy address belongs to the object at ffff88804342c000 [ 76.006622][ T5341] which belongs to the cache kmalloc-32 of size 32 [ 76.011918][ T5341] The buggy address is located 0 bytes to the right of [ 76.011918][ T5341] allocated 32-byte region [ffff88804342c000, ffff88804342c020) [ 76.017736][ T5341] [ 76.018819][ T5341] The buggy address belongs to the physical page: [ 76.021686][ T5341] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4342c [ 76.025638][ T5341] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 76.028790][ T5341] page_type: f5(slab) [ 76.030487][ T5341] raw: 04fff00000000000 ffff88801a441780 ffffea00010f6240 0000000000000003 [ 76.034338][ T5341] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 76.037785][ T5341] page dumped because: kasan: bad access detected [ 76.040530][ T5341] page_owner tracks the page as allocated [ 76.043123][ T5341] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5286, tgid 5286 (dhcpcd-run-hook), ts 59390937576, free_ts 59390345728 [ 76.051202][ T5341] post_alloc_hook+0x240/0x2a0 [ 76.053435][ T5341] get_page_from_freelist+0x21e4/0x22c0 [ 76.055982][ T5341] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.058388][ T5341] alloc_pages_mpol+0x232/0x4a0 [ 76.060642][ T5341] allocate_slab+0x8a/0x3b0 [ 76.062310][ T5341] ___slab_alloc+0xbfc/0x1480 [ 76.064090][ T5341] __kmalloc_cache_noprof+0x296/0x3d0 [ 76.066257][ T5341] kmem_cache_free+0x166/0x400 [ 76.068358][ T5341] exit_mmap+0x53f/0xb50 [ 76.070221][ T5341] __mmput+0x118/0x420 [ 76.072076][ T5341] exit_mm+0x1da/0x2c0 [ 76.074018][ T5341] do_exit+0x648/0x22e0 [ 76.076268][ T5341] do_group_exit+0x21c/0x2d0 [ 76.078374][ T5341] __x64_sys_exit_group+0x3f/0x40 [ 76.080424][ T5341] x64_sys_call+0x21ba/0x21c0 [ 76.082665][ T5341] do_syscall_64+0xfa/0x3b0 [ 76.084537][ T5341] page last free pid 5286 tgid 5286 stack trace: [ 76.087233][ T5341] __free_frozen_pages+0xc71/0xe70 [ 76.089293][ T5341] tlb_finish_mmu+0x112/0x1d0 [ 76.091458][ T5341] exit_mmap+0x44c/0xb50 [ 76.093498][ T5341] __mmput+0x118/0x420 [ 76.095227][ T5341] exit_mm+0x1da/0x2c0 [ 76.097115][ T5341] do_exit+0x648/0x22e0 [ 76.099491][ T5341] do_group_exit+0x21c/0x2d0 [ 76.102172][ T5341] __x64_sys_exit_group+0x3f/0x40 [ 76.104449][ T5341] x64_sys_call+0x21ba/0x21c0 [ 76.106406][ T5341] do_syscall_64+0xfa/0x3b0 [ 76.108438][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.110912][ T5341] [ 76.111960][ T5341] Memory state around the buggy address: [ 76.114311][ T5341] ffff88804342bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.117620][ T5341] ffff88804342bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.120910][ T5341] >ffff88804342c000: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 76.124192][ T5341] ^ [ 76.126205][ T5341] ffff88804342c080: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 76.129695][ T5341] ffff88804342c100: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 76.133434][ T5341] ================================================================== [ 76.147163][ T5341] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.150160][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 76.155200][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.160635][ T5341] Call Trace: [ 76.162187][ T5341] [ 76.163394][ T5341] dump_stack_lvl+0x99/0x250 [ 76.165367][ T5341] ? __asan_memcpy+0x40/0x70 [ 76.167168][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.169259][ T5341] ? __pfx__printk+0x10/0x10 [ 76.171210][ T5341] panic+0x2db/0x790 [ 76.172851][ T5341] ? __pfx_panic+0x10/0x10 [ 76.174849][ T5341] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 76.177607][ T5341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.180804][ T5341] ? print_memory_metadata+0x314/0x400 [ 76.183057][ T5341] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.186079][ T5341] check_panic_on_warn+0x89/0xb0 [ 76.188251][ T5341] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.190806][ T5341] end_report+0x78/0x160 [ 76.192759][ T5341] kasan_report+0x129/0x150 [ 76.194883][ T5341] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.197506][ T5341] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.199933][ T5341] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 76.202836][ T5341] ? __pfx_start_this_handle+0x10/0x10 [ 76.205190][ T5341] __ocfs2_claim_clusters+0x303/0x8f0 [ 76.207519][ T5341] ? trace_jbd2_handle_start+0x8a/0x220 [ 76.209681][ T5341] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 76.212230][ T5341] ? ocfs2_start_trans+0x495/0x6d0 [ 76.214527][ T5341] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 76.216925][ T5341] ocfs2_reserve_suballoc_bits+0xf1e/0x4640 [ 76.219525][ T5341] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 76.222258][ T5341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.225080][ T5341] ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10 [ 76.227893][ T5341] ? stack_depot_save_flags+0x429/0x900 [ 76.230315][ T5341] ? kasan_save_track+0x4f/0x80 [ 76.232466][ T5341] ? kasan_save_track+0x3e/0x80 [ 76.234674][ T5341] ? __kasan_kmalloc+0x93/0xb0 [ 76.236834][ T5341] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 76.239279][ T5341] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 76.241991][ T5341] ? ocfs2_lock_allocators+0x29e/0x5c0 [ 76.244115][ T5341] ? ocfs2_extend_allocation+0x39b/0x17a0 [ 76.246517][ T5341] ? ocfs2_allocate_unwritten_extents+0x2e9/0x7b0 [ 76.249226][ T5341] ? __ocfs2_change_file_space+0x901/0xe80 [ 76.251772][ T5341] ? ocfs2_fallocate+0x1f5/0x240 [ 76.254012][ T5341] ? vfs_fallocate+0x6a3/0x830 [ 76.256055][ T5341] ? __x64_sys_fallocate+0xc0/0x110 [ 76.258434][ T5341] ? do_syscall_64+0xfa/0x3b0 [ 76.260455][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.263249][ T5341] ? __kasan_kmalloc+0x93/0xb0 [ 76.265349][ T5341] ? ocfs2_reserve_new_metadata_blocks+0x113/0x940 [ 76.268109][ T5341] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 76.270762][ T5341] ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10 [ 76.274085][ T5341] ? ocfs2_num_free_extents+0x347/0x620 [ 76.276871][ T5341] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 76.279663][ T5341] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 76.282109][ T5341] ocfs2_lock_allocators+0x29e/0x5c0 [ 76.284446][ T5341] ? __pfx_ocfs2_lock_allocators+0x10/0x10 [ 76.286778][ T5341] ? ocfs2_read_inode_block+0x11d/0x190 [ 76.288965][ T5341] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 76.291182][ T5341] ocfs2_extend_allocation+0x39b/0x17a0 [ 76.293570][ T5341] ? ocfs2_search_extent_list+0x1b7/0x220 [ 76.296036][ T5341] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 76.298923][ T5341] ? __pfx_ocfs2_extend_allocation+0x10/0x10 [ 76.301589][ T5341] ? ocfs2_read_inode_block+0x11d/0x190 [ 76.303823][ T5341] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 76.306275][ T5341] ? __brelse+0x59/0xa0 [ 76.308051][ T5341] ? ocfs2_get_clusters+0x2b3/0xa70 [ 76.310488][ T5341] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 76.313070][ T5341] ? do_raw_spin_unlock+0x4d/0x240 [ 76.314974][ T5341] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 76.317360][ T5341] ? __lock_acquire+0xab9/0xd20 [ 76.319339][ T5341] ocfs2_allocate_unwritten_extents+0x2e9/0x7b0 [ 76.321989][ T5341] ? __pfx_ocfs2_allocate_unwritten_extents+0x10/0x10 [ 76.324869][ T5341] ? inode_dio_wait+0x19e/0x240 [ 76.326856][ T5341] ? down_write+0x162/0x1f0 [ 76.328669][ T5341] ? __pfx_down_write+0x10/0x10 [ 76.330671][ T5341] ? do_raw_spin_unlock+0x4d/0x240 [ 76.332801][ T5341] __ocfs2_change_file_space+0x901/0xe80 [ 76.335109][ T5341] ? __pfx___ocfs2_change_file_space+0x10/0x10 [ 76.337684][ T5341] ? __lock_acquire+0xab9/0xd20 [ 76.339880][ T5341] ocfs2_fallocate+0x1f5/0x240 [ 76.342159][ T5341] vfs_fallocate+0x6a3/0x830 [ 76.344193][ T5341] ? __fget_files+0x2a/0x420 [ 76.346247][ T5341] ? __pfx_vfs_fallocate+0x10/0x10 [ 76.348337][ T5341] ? __fget_files+0x2a/0x420 [ 76.350407][ T5341] __x64_sys_fallocate+0xc0/0x110 [ 76.352623][ T5341] do_syscall_64+0xfa/0x3b0 [ 76.354539][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.356844][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.359456][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 76.361594][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.364088][ T5341] RIP: 0033:0x7fa2b178e9a9 [ 76.366042][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.374838][ T5341] RSP: 002b:00007fa2b2589038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 76.378890][ T5341] RAX: ffffffffffffffda RBX: 00007fa2b19b5fa0 RCX: 00007fa2b178e9a9 [ 76.382625][ T5341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 76.385942][ T5341] RBP: 00007fa2b1810d69 R08: 0000000000000000 R09: 0000000000000000 [ 76.389228][ T5341] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000000 [ 76.392754][ T5341] R13: 0000000000000000 R14: 00007fa2b19b5fa0 R15: 00007ffff7c0c0f8 [ 76.395853][ T5341] [ 76.397530][ T5341] Kernel Offset: disabled [ 76.399598][ T5341] Rebooting in 86400 seconds..