program: syz_mount_image$efs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x28d, &(0x7f0000000380)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x443d, &(0x7f00000088c0)="$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") r7 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc, 0x0, 0x0, 0x0, @void, @value}, 0x20) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x20, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000}]) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r10, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r14, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x800000, 0x10}}) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) [ 89.170356][ T5327] loop0: detected capacity change from 0 to 128 [ 89.185589][ T5305] Bluetooth: hci0: command tx timeout [ 89.623274][ T5327] loop0: detected capacity change from 0 to 32768 [ 89.686379][ T5327] ======================================================= [ 89.686379][ T5327] WARNING: The mand mount option has been deprecated and [ 89.686379][ T5327] and is ignored by this kernel. Remove the mand [ 89.686379][ T5327] option from the mount to silence this warning. [ 89.686379][ T5327] ======================================================= [ 89.770773][ T5327] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.890658][ T5327] ================================================================== [ 89.894924][ T5327] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 89.899142][ T5327] Read of size 4 at addr ffff888053d9d000 by task syz.0.0/5327 [ 89.902553][ T5327] [ 89.903782][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 89.903802][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.903811][ T5327] Call Trace: [ 89.903819][ T5327] [ 89.903827][ T5327] dump_stack_lvl+0x189/0x250 [ 89.903857][ T5327] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.903880][ T5327] ? rcu_is_watching+0x15/0xb0 [ 89.903901][ T5327] ? __kasan_check_byte+0x12/0x40 [ 89.903915][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.903936][ T5327] ? rcu_is_watching+0x15/0xb0 [ 89.903955][ T5327] ? lock_release+0x4b/0x3e0 [ 89.903975][ T5327] ? __virt_addr_valid+0x1c8/0x5c0 [ 89.903986][ T5327] ? __virt_addr_valid+0x4a5/0x5c0 [ 89.903998][ T5327] print_report+0xd2/0x2b0 [ 89.904015][ T5327] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 89.904033][ T5327] kasan_report+0x118/0x150 [ 89.904049][ T5327] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 89.904067][ T5327] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 89.904086][ T5327] ? __lock_acquire+0xab9/0xd20 [ 89.904104][ T5327] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 89.904120][ T5327] ? check_path+0x21/0x40 [ 89.904131][ T5327] ? check_noncircular+0xe0/0x160 [ 89.904144][ T5327] ? lockdep_unlock+0x89/0x120 [ 89.904160][ T5327] ? validate_chain+0x897/0x2140 [ 89.904177][ T5327] __ocfs2_claim_clusters+0x303/0x8f0 [ 89.904194][ T5327] ? __lock_acquire+0xab9/0xd20 [ 89.904213][ T5327] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 89.904229][ T5327] ? ocfs2_num_free_extents+0x347/0x620 [ 89.904246][ T5327] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 89.904260][ T5327] ? lockdep_unlock+0x89/0x120 [ 89.904276][ T5327] ? validate_chain+0x897/0x2140 [ 89.904290][ T5327] ocfs2_add_clusters_in_btree+0x336/0xf80 [ 89.904307][ T5327] ? check_path+0x21/0x40 [ 89.904318][ T5327] ? check_noncircular+0xe0/0x160 [ 89.904330][ T5327] ? __pfx_ocfs2_add_clusters_in_btree+0x10/0x10 [ 89.904346][ T5327] ? lockdep_unlock+0x89/0x120 [ 89.904360][ T5327] ? validate_chain+0x897/0x2140 [ 89.904377][ T5327] ocfs2_add_inode_data+0xce/0x120 [ 89.904390][ T5327] ? __pfx_ocfs2_add_inode_data+0x10/0x10 [ 89.904410][ T5327] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 89.904428][ T5327] ? __mutex_trylock_common+0x153/0x260 [ 89.904443][ T5327] ocfs2_write_cluster_by_desc+0x547/0x1cf0 [ 89.904465][ T5327] ? __pfx_ocfs2_write_cluster_by_desc+0x10/0x10 [ 89.904481][ T5327] ? jbd2_write_access_granted+0x69/0x310 [ 89.904502][ T5327] ? __ocfs2_journal_access+0x621/0x820 [ 89.904520][ T5327] ? ocfs2_grab_folios_for_write+0xa57/0xd80 [ 89.904539][ T5327] ? __pfx_ocfs2_grab_folios_for_write+0x10/0x10 [ 89.904552][ T5327] ? rcu_is_watching+0x15/0xb0 [ 89.904569][ T5327] ? ocfs2_write_begin_nolock+0xeb9/0x4340 [ 89.904582][ T5327] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 89.904596][ T5327] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 89.904612][ T5327] ocfs2_write_begin_nolock+0x31a3/0x4340 [ 89.904641][ T5327] ? __pfx_ocfs2_write_begin_nolock+0x10/0x10 [ 89.904653][ T5327] ? __bfs+0x154/0x2a0 [ 89.904667][ T5327] ? check_path+0x21/0x40 [ 89.904673][ T5327] ? check_noncircular+0xe0/0x160 [ 89.904682][ T5327] ? lockdep_unlock+0x89/0x120 [ 89.904691][ T5327] ? validate_chain+0x897/0x2140 [ 89.904702][ T5327] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 89.904721][ T5327] ? __lock_acquire+0xab9/0xd20 [ 89.904738][ T5327] ? ocfs2_dio_wr_get_block+0x8ee/0x1770 [ 89.904757][ T5327] ? down_write+0x162/0x1f0 [ 89.904828][ T5327] ? __pfx_down_write+0x10/0x10 [ 89.904842][ T5327] ? __kasan_kmalloc+0x93/0xb0 [ 89.904857][ T5327] ? ocfs2_dio_wr_get_block+0x476/0x1770 [ 89.904881][ T5327] ocfs2_dio_wr_get_block+0xb6f/0x1770 [ 89.904904][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 89.904926][ T5327] ? iov_iter_advance+0x8b/0x1c0 [ 89.904948][ T5327] ? iov_iter_extract_pages+0x396/0x5e0 [ 89.904963][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 89.904978][ T5327] __blockdev_direct_IO+0x16da/0x33d0 [ 89.905007][ T5327] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 89.905026][ T5327] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 89.905049][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 89.905064][ T5327] ? filemap_write_and_wait_range+0x182/0x310 [ 89.905079][ T5327] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 89.905102][ T5327] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 89.905114][ T5327] ? _raw_spin_lock_irq+0xae/0xf0 [ 89.905131][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 89.905146][ T5327] ocfs2_direct_IO+0x25f/0x2d0 [ 89.905163][ T5327] generic_file_direct_write+0x1db/0x3e0 [ 89.905181][ T5327] ? file_update_time+0x416/0x490 [ 89.905199][ T5327] __generic_file_write_iter+0x11d/0x230 [ 89.905216][ T5327] ? ocfs2_file_write_iter+0x1551/0x1d10 [ 89.905230][ T5327] ocfs2_file_write_iter+0x157a/0x1d10 [ 89.905249][ T5327] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 89.905266][ T5327] ? __lock_acquire+0xab9/0xd20 [ 89.905289][ T5327] ? aio_write+0x4c4/0x7a0 [ 89.905305][ T5327] aio_write+0x535/0x7a0 [ 89.905320][ T5327] ? __pfx_aio_write+0x10/0x10 [ 89.905339][ T5327] ? __might_fault+0xb0/0x130 [ 89.905357][ T5327] io_submit_one+0x78b/0x1310 [ 89.905376][ T5327] ? __pfx_io_submit_one+0x10/0x10 [ 89.905391][ T5327] ? __might_fault+0xb0/0x130 [ 89.905405][ T5327] ? __might_fault+0xb0/0x130 [ 89.905417][ T5327] __se_sys_io_submit+0x185/0x2f0 [ 89.905439][ T5327] ? __pfx___se_sys_io_submit+0x10/0x10 [ 89.905454][ T5327] ? do_syscall_64+0xbe/0x3b0 [ 89.905469][ T5327] do_syscall_64+0xfa/0x3b0 [ 89.905488][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.905521][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.905534][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 89.905547][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.905560][ T5327] RIP: 0033:0x7f371e78e929 [ 89.905603][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.905615][ T5327] RSP: 002b:00007f371f5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 89.905632][ T5327] RAX: ffffffffffffffda RBX: 00007f371e9b5fa0 RCX: 00007f371e78e929 [ 89.905644][ T5327] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f371f56d000 [ 89.905654][ T5327] RBP: 00007f371e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 89.905663][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.905672][ T5327] R13: 0000000000000000 R14: 00007f371e9b5fa0 R15: 00007ffd24c23c98 [ 89.905687][ T5327] [ 89.905693][ T5327] [ 90.205131][ T5327] The buggy address belongs to the physical page: [ 90.208648][ T5327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f7e18fec pfn:0x53d9d [ 90.213255][ T5327] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 90.216381][ T5327] raw: 04fff00000000000 ffffea00014f6548 ffffea00014f6788 0000000000000000 [ 90.220118][ T5327] raw: 00000007f7e18fec 0000000000000000 00000000ffffffff 0000000000000000 [ 90.224308][ T5327] page dumped because: kasan: bad access detected [ 90.228101][ T5327] page_owner tracks the page as freed [ 90.230749][ T5327] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5302, tgid 5302 (udevd), ts 89730393972, free_ts 89777486933 [ 90.238700][ T5327] post_alloc_hook+0x240/0x2a0 [ 90.241512][ T5327] get_page_from_freelist+0x21e4/0x22c0 [ 90.244278][ T5327] __alloc_frozen_pages_noprof+0x181/0x370 [ 90.246797][ T5327] alloc_pages_mpol+0x232/0x4a0 [ 90.248983][ T5327] vma_alloc_folio_noprof+0xe4/0x200 [ 90.251248][ T5327] folio_prealloc+0x30/0x180 [ 90.253491][ T5327] __handle_mm_fault+0x2c88/0x5620 [ 90.256567][ T5327] handle_mm_fault+0x40a/0x8e0 [ 90.258973][ T5327] do_user_addr_fault+0x764/0x1390 [ 90.261035][ T5327] exc_page_fault+0x76/0xf0 [ 90.263061][ T5327] asm_exc_page_fault+0x26/0x30 [ 90.265273][ T5327] page last free pid 5302 tgid 5302 stack trace: [ 90.268587][ T5327] free_unref_folios+0xc66/0x14d0 [ 90.271029][ T5327] folios_put_refs+0x559/0x640 [ 90.273116][ T5327] free_pages_and_swap_cache+0x4be/0x520 [ 90.275751][ T5327] tlb_flush_mmu+0x3a0/0x680 [ 90.278099][ T5327] tlb_finish_mmu+0xc3/0x1d0 [ 90.280465][ T5327] vms_clear_ptes+0x42c/0x540 [ 90.282743][ T5327] vms_complete_munmap_vmas+0x206/0x8a0 [ 90.285006][ T5327] do_vmi_align_munmap+0x358/0x420 [ 90.287230][ T5327] do_vmi_munmap+0x253/0x2e0 [ 90.289452][ T5327] __vm_munmap+0x23b/0x3d0 [ 90.291901][ T5327] __x64_sys_munmap+0x60/0x70 [ 90.294276][ T5327] do_syscall_64+0xfa/0x3b0 [ 90.296302][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.298967][ T5327] [ 90.300020][ T5327] Memory state around the buggy address: [ 90.302728][ T5327] ffff888053d9cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.306852][ T5327] ffff888053d9cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.310542][ T5327] >ffff888053d9d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.314014][ T5327] ^ [ 90.315977][ T5327] ffff888053d9d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.319545][ T5327] ffff888053d9d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.323287][ T5327] ================================================================== [ 90.429733][ T5327] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.432866][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 90.437398][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.441950][ T5327] Call Trace: [ 90.443483][ T5327] [ 90.445272][ T5327] dump_stack_lvl+0x99/0x250 [ 90.448544][ T5327] ? __asan_memcpy+0x40/0x70 [ 90.451023][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.453407][ T5327] ? __pfx__printk+0x10/0x10 [ 90.455385][ T5327] panic+0x2db/0x790 [ 90.457215][ T5327] ? __pfx_panic+0x10/0x10 [ 90.459250][ T5327] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 90.461846][ T5327] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.464724][ T5327] ? print_memory_metadata+0x314/0x400 [ 90.467506][ T5327] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 90.470558][ T5327] check_panic_on_warn+0x89/0xb0 [ 90.472802][ T5327] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 90.475358][ T5327] end_report+0x78/0x160 [ 90.477230][ T5327] kasan_report+0x129/0x150 [ 90.479397][ T5327] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 90.482707][ T5327] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 90.485837][ T5327] ? __lock_acquire+0xab9/0xd20 [ 90.488109][ T5327] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 90.490892][ T5327] ? check_path+0x21/0x40 [ 90.492940][ T5327] ? check_noncircular+0xe0/0x160 [ 90.495167][ T5327] ? lockdep_unlock+0x89/0x120 [ 90.497242][ T5327] ? validate_chain+0x897/0x2140 [ 90.499517][ T5327] __ocfs2_claim_clusters+0x303/0x8f0 [ 90.502109][ T5327] ? __lock_acquire+0xab9/0xd20 [ 90.504704][ T5327] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 90.507475][ T5327] ? ocfs2_num_free_extents+0x347/0x620 [ 90.509544][ T5327] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 90.511990][ T5327] ? lockdep_unlock+0x89/0x120 [ 90.514337][ T5327] ? validate_chain+0x897/0x2140 [ 90.516739][ T5327] ocfs2_add_clusters_in_btree+0x336/0xf80 [ 90.520035][ T5327] ? check_path+0x21/0x40 [ 90.522396][ T5327] ? check_noncircular+0xe0/0x160 [ 90.524768][ T5327] ? __pfx_ocfs2_add_clusters_in_btree+0x10/0x10 [ 90.527645][ T5327] ? lockdep_unlock+0x89/0x120 [ 90.529639][ T5327] ? validate_chain+0x897/0x2140 [ 90.531957][ T5327] ocfs2_add_inode_data+0xce/0x120 [ 90.534318][ T5327] ? __pfx_ocfs2_add_inode_data+0x10/0x10 [ 90.537255][ T5327] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 90.540374][ T5327] ? __mutex_trylock_common+0x153/0x260 [ 90.543498][ T5327] ocfs2_write_cluster_by_desc+0x547/0x1cf0 [ 90.546265][ T5327] ? __pfx_ocfs2_write_cluster_by_desc+0x10/0x10 [ 90.549241][ T5327] ? jbd2_write_access_granted+0x69/0x310 [ 90.551697][ T5327] ? __ocfs2_journal_access+0x621/0x820 [ 90.554240][ T5327] ? ocfs2_grab_folios_for_write+0xa57/0xd80 [ 90.557331][ T5327] ? __pfx_ocfs2_grab_folios_for_write+0x10/0x10 [ 90.560511][ T5327] ? rcu_is_watching+0x15/0xb0 [ 90.563001][ T5327] ? ocfs2_write_begin_nolock+0xeb9/0x4340 [ 90.565502][ T5327] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 90.568052][ T5327] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 90.570401][ T5327] ocfs2_write_begin_nolock+0x31a3/0x4340 [ 90.573064][ T5327] ? __pfx_ocfs2_write_begin_nolock+0x10/0x10 [ 90.576152][ T5327] ? __bfs+0x154/0x2a0 [ 90.578008][ T5327] ? check_path+0x21/0x40 [ 90.579670][ T5327] ? check_noncircular+0xe0/0x160 [ 90.581684][ T5327] ? lockdep_unlock+0x89/0x120 [ 90.583768][ T5327] ? validate_chain+0x897/0x2140 [ 90.585937][ T5327] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 90.588313][ T5327] ? __lock_acquire+0xab9/0xd20 [ 90.590747][ T5327] ? ocfs2_dio_wr_get_block+0x8ee/0x1770 [ 90.594091][ T5327] ? down_write+0x162/0x1f0 [ 90.596543][ T5327] ? __pfx_down_write+0x10/0x10 [ 90.599088][ T5327] ? __kasan_kmalloc+0x93/0xb0 [ 90.601093][ T5327] ? ocfs2_dio_wr_get_block+0x476/0x1770 [ 90.603597][ T5327] ocfs2_dio_wr_get_block+0xb6f/0x1770 [ 90.605951][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 90.608628][ T5327] ? iov_iter_advance+0x8b/0x1c0 [ 90.611208][ T5327] ? iov_iter_extract_pages+0x396/0x5e0 [ 90.614242][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 90.617048][ T5327] __blockdev_direct_IO+0x16da/0x33d0 [ 90.619394][ T5327] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 90.621791][ T5327] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 90.624660][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 90.627386][ T5327] ? filemap_write_and_wait_range+0x182/0x310 [ 90.631524][ T5327] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 90.634710][ T5327] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 90.637474][ T5327] ? _raw_spin_lock_irq+0xae/0xf0 [ 90.639738][ T5327] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 90.642344][ T5327] ocfs2_direct_IO+0x25f/0x2d0 [ 90.644526][ T5327] generic_file_direct_write+0x1db/0x3e0 [ 90.647046][ T5327] ? file_update_time+0x416/0x490 [ 90.649699][ T5327] __generic_file_write_iter+0x11d/0x230 [ 90.652851][ T5327] ? ocfs2_file_write_iter+0x1551/0x1d10 [ 90.656022][ T5327] ocfs2_file_write_iter+0x157a/0x1d10 [ 90.658386][ T5327] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 90.661096][ T5327] ? __lock_acquire+0xab9/0xd20 [ 90.663342][ T5327] ? aio_write+0x4c4/0x7a0 [ 90.665310][ T5327] aio_write+0x535/0x7a0 [ 90.667208][ T5327] ? __pfx_aio_write+0x10/0x10 [ 90.669527][ T5327] ? __might_fault+0xb0/0x130 [ 90.672017][ T5327] io_submit_one+0x78b/0x1310 [ 90.674546][ T5327] ? __pfx_io_submit_one+0x10/0x10 [ 90.676996][ T5327] ? __might_fault+0xb0/0x130 [ 90.679151][ T5327] ? __might_fault+0xb0/0x130 [ 90.681432][ T5327] __se_sys_io_submit+0x185/0x2f0 [ 90.684018][ T5327] ? __pfx___se_sys_io_submit+0x10/0x10 [ 90.686806][ T5327] ? do_syscall_64+0xbe/0x3b0 [ 90.689124][ T5327] do_syscall_64+0xfa/0x3b0 [ 90.691315][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.693863][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.696662][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 90.698770][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.701663][ T5327] RIP: 0033:0x7f371e78e929 [ 90.703864][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.713012][ T5327] RSP: 002b:00007f371f5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 90.717087][ T5327] RAX: ffffffffffffffda RBX: 00007f371e9b5fa0 RCX: 00007f371e78e929 [ 90.721121][ T5327] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f371f56d000 [ 90.724525][ T5327] RBP: 00007f371e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 90.728196][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.732951][ T5327] R13: 0000000000000000 R14: 00007f371e9b5fa0 R15: 00007ffd24c23c98 [ 90.737015][ T5327] [ 90.738694][ T5327] Kernel Offset: disabled [ 90.740441][ T5327] Rebooting in 86400 seconds..