program: syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0xcc0, &(0x7f00000003c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x4453, &(0x7f000000cd00)="$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") symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) [ 76.215028][ T5336] Bluetooth: hci0: command tx timeout [ 76.365648][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.368459][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.622568][ T5356] loop0: detected capacity change from 0 to 32768 [ 76.646846][ T5356] ======================================================= [ 76.646846][ T5356] WARNING: The mand mount option has been deprecated and [ 76.646846][ T5356] and is ignored by this kernel. Remove the mand [ 76.646846][ T5356] option from the mount to silence this warning. [ 76.646846][ T5356] ======================================================= [ 76.712107][ T5356] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.737984][ T5356] ================================================================== [ 76.741197][ T5356] BUG: KASAN: slab-use-after-free in ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.745056][ T5356] Read of size 4 at addr ffff888052cfb000 by task syz.0.0/5356 [ 76.748661][ T5356] [ 76.749803][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.749820][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.749829][ T5356] Call Trace: [ 76.749835][ T5356] [ 76.749841][ T5356] dump_stack_lvl+0x189/0x250 [ 76.749859][ T5356] ? __kasan_check_byte+0x12/0x40 [ 76.749873][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.749886][ T5356] ? lock_release+0x4b/0x3e0 [ 76.749902][ T5356] ? __virt_addr_valid+0x4a5/0x5c0 [ 76.749916][ T5356] print_report+0xca/0x240 [ 76.749927][ T5356] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.749938][ T5356] kasan_report+0x118/0x150 [ 76.749953][ T5356] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.749967][ T5356] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 76.749979][ T5356] ? kasan_save_track+0x4f/0x80 [ 76.749995][ T5356] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 76.750010][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750025][ T5356] ? do_raw_spin_lock+0x121/0x290 [ 76.750041][ T5356] ocfs2_claim_metadata+0x178/0x4c0 [ 76.750054][ T5356] ? __pfx_ocfs2_claim_metadata+0x10/0x10 [ 76.750065][ T5356] ? rcu_is_watching+0x15/0xb0 [ 76.750076][ T5356] ? ocfs2_insert_extent+0x121b/0x1980 [ 76.750088][ T5356] ? kfree+0x4d/0x440 [ 76.750099][ T5356] ? __pfx_ocfs2_dinode_extent_map_insert+0x10/0x10 [ 76.750113][ T5356] ? ocfs2_insert_extent+0x1358/0x1980 [ 76.750125][ T5356] ocfs2_dx_dir_attach_index+0x1c1/0xd90 [ 76.750142][ T5356] ? jbd2_journal_dirty_metadata+0x356/0xc30 [ 76.750157][ T5356] ? __pfx_ocfs2_dx_dir_attach_index+0x10/0x10 [ 76.750172][ T5356] ? ocfs2_journal_dirty+0x471/0x740 [ 76.750186][ T5356] ? __pfx_ocfs2_journal_dirty+0x10/0x10 [ 76.750200][ T5356] ? __asan_memset+0x22/0x50 [ 76.750210][ T5356] ocfs2_extend_dir+0x3994/0x4870 [ 76.750224][ T5356] ? update_se+0x91/0x5f0 [ 76.750247][ T5356] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 76.750261][ T5356] ? __bfs+0x154/0x2a0 [ 76.750269][ T5356] ? __pfx_hlock_conflict+0x10/0x10 [ 76.750281][ T5356] ? check_noncircular+0xe0/0x160 [ 76.750293][ T5356] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 76.750306][ T5356] ? lockdep_unlock+0x89/0x120 [ 76.750321][ T5356] ? check_path+0x21/0x40 [ 76.750331][ T5356] ? check_noncircular+0xe0/0x160 [ 76.750343][ T5356] ? __bfs+0x154/0x2a0 [ 76.750351][ T5356] ? __pfx_usage_match+0x10/0x10 [ 76.750363][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750394][ T5356] ? rcu_is_watching+0x15/0xb0 [ 76.750406][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.750427][ T5356] ? ocfs2_dx_dir_name_hash+0x229/0xaf0 [ 76.750442][ T5356] ? __asan_memcpy+0x40/0x70 [ 76.750453][ T5356] ? ocfs2_dx_dir_name_hash+0x9ba/0xaf0 [ 76.750468][ T5356] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 76.750482][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.750500][ T5356] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 76.750519][ T5356] ? rcu_is_watching+0x15/0xb0 [ 76.750530][ T5356] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 76.750543][ T5356] ? ocfs2_search_dirblock+0x381/0x850 [ 76.750560][ T5356] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 76.750571][ T5356] ? rcu_is_watching+0x15/0xb0 [ 76.750581][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 76.750598][ T5356] ? __brelse+0x59/0xa0 [ 76.750612][ T5356] ? ocfs2_find_entry+0xddb/0x2000 [ 76.750624][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750641][ T5356] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 76.750652][ T5356] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 76.750662][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750709][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750728][ T5356] ? ocfs2_read_inode_block+0x11d/0x190 [ 76.750739][ T5356] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 76.750749][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 76.750759][ T5356] ? ocfs2_inode_lock_full_nested+0xabe/0x1b40 [ 76.750768][ T5356] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 76.750779][ T5356] ? __kernel_text_address+0xd/0x40 [ 76.750791][ T5356] ? unwind_get_return_address+0x4d/0x90 [ 76.750805][ T5356] ? ocfs2_check_dir_for_entry+0x239/0x3f0 [ 76.750821][ T5356] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 76.750837][ T5356] ocfs2_symlink+0xaa4/0x23e0 [ 76.750856][ T5356] ? __pfx_ocfs2_symlink+0x10/0x10 [ 76.750872][ T5356] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 76.750891][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750910][ T5356] ? __lock_acquire+0xab9/0xd20 [ 76.750928][ T5356] ? do_raw_spin_lock+0x121/0x290 [ 76.750943][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 76.750958][ T5356] ? put_pid+0xe9/0x130 [ 76.750970][ T5356] ? ocfs2_permission+0x107/0x1b0 [ 76.750984][ T5356] ? __pfx_ocfs2_permission+0x10/0x10 [ 76.750998][ T5356] ? from_kgid+0x1b0/0x650 [ 76.751013][ T5356] ? __pfx_from_kgid+0x10/0x10 [ 76.751027][ T5356] ? __pfx_apparmor_path_symlink+0x10/0x10 [ 76.751039][ T5356] ? make_vfsgid+0x49/0xa0 [ 76.751049][ T5356] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 76.751066][ T5356] ? inode_permission+0x149/0x470 [ 76.751079][ T5356] ? __pfx_ocfs2_permission+0x10/0x10 [ 76.751093][ T5356] ? bpf_lsm_inode_symlink+0x9/0x20 [ 76.751110][ T5356] vfs_symlink+0x140/0x2f0 [ 76.751123][ T5356] do_symlinkat+0x1b1/0x3f0 [ 76.751136][ T5356] ? __pfx_do_symlinkat+0x10/0x10 [ 76.751147][ T5356] ? strncpy_from_user+0x150/0x290 [ 76.751160][ T5356] ? getname_flags+0x1e5/0x540 [ 76.751176][ T5356] __x64_sys_symlink+0x7a/0x90 [ 76.751189][ T5356] do_syscall_64+0xfa/0x3b0 [ 76.751249][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.751260][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.751271][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 76.751282][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.751292][ T5356] RIP: 0033:0x7fbe8678eec9 [ 76.751303][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.751313][ T5356] RSP: 002b:00007fbe8763b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 76.751326][ T5356] RAX: ffffffffffffffda RBX: 00007fbe869e5fa0 RCX: 00007fbe8678eec9 [ 76.751334][ T5356] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 00002000000003c0 [ 76.751342][ T5356] RBP: 00007fbe86811f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.751349][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.751354][ T5356] R13: 00007fbe869e6038 R14: 00007fbe869e5fa0 R15: 00007fff16dfeed8 [ 76.751363][ T5356] [ 76.751366][ T5356] [ 77.020353][ T5356] Allocated by task 15: [ 77.022248][ T5356] kasan_save_track+0x3e/0x80 [ 77.024301][ T5356] __kasan_slab_alloc+0x6c/0x80 [ 77.026468][ T5356] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 77.029158][ T5356] __alloc_skb+0x112/0x2d0 [ 77.031255][ T5356] skb_copy+0x188/0x800 [ 77.033044][ T5356] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 77.035655][ T5356] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 77.037958][ T5356] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 77.040311][ T5356] __iterate_interfaces+0x2a8/0x590 [ 77.042568][ T5356] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 77.045708][ T5356] mac80211_hwsim_beacon+0xbb/0x1c0 [ 77.048038][ T5356] __hrtimer_run_queues+0x529/0xc60 [ 77.050223][ T5356] hrtimer_run_softirq+0x187/0x2b0 [ 77.052620][ T5356] handle_softirqs+0x283/0x870 [ 77.054692][ T5356] run_ksoftirqd+0x9b/0x100 [ 77.056768][ T5356] smpboot_thread_fn+0x53f/0xa60 [ 77.058996][ T5356] kthread+0x70e/0x8a0 [ 77.060769][ T5356] ret_from_fork+0x439/0x7d0 [ 77.062827][ T5356] ret_from_fork_asm+0x1a/0x30 [ 77.064977][ T5356] [ 77.066090][ T5356] Freed by task 43: [ 77.067834][ T5356] kasan_save_track+0x3e/0x80 [ 77.069925][ T5356] kasan_save_free_info+0x46/0x50 [ 77.073076][ T5356] __kasan_slab_free+0x5b/0x80 [ 77.075316][ T5356] kmem_cache_free+0x18f/0x400 [ 77.077360][ T5356] ieee80211_iface_work+0xb30/0x12d0 [ 77.079622][ T5356] cfg80211_wiphy_work+0x2b8/0x470 [ 77.082164][ T5356] process_scheduled_works+0xae1/0x17b0 [ 77.084608][ T5356] worker_thread+0x8a0/0xda0 [ 77.086740][ T5356] kthread+0x70e/0x8a0 [ 77.088625][ T5356] ret_from_fork+0x439/0x7d0 [ 77.090802][ T5356] ret_from_fork_asm+0x1a/0x30 [ 77.092932][ T5356] [ 77.094027][ T5356] The buggy address belongs to the object at ffff888052cfb000 [ 77.094027][ T5356] which belongs to the cache skbuff_head_cache of size 240 [ 77.100348][ T5356] The buggy address is located 0 bytes inside of [ 77.100348][ T5356] freed 240-byte region [ffff888052cfb000, ffff888052cfb0f0) [ 77.106095][ T5356] [ 77.107204][ T5356] The buggy address belongs to the physical page: [ 77.109970][ T5356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52cfb [ 77.113810][ T5356] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 77.116956][ T5356] page_type: f5(slab) [ 77.118737][ T5356] raw: 04fff00000000000 ffff88801c2d1c80 dead000000000122 0000000000000000 [ 77.122422][ T5356] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 77.126156][ T5356] page dumped because: kasan: bad access detected [ 77.129050][ T5356] page_owner tracks the page as allocated [ 77.131567][ T5356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 76404214274, free_ts 0 [ 77.139318][ T5356] post_alloc_hook+0x240/0x2a0 [ 77.141471][ T5356] get_page_from_freelist+0x21e4/0x22c0 [ 77.143969][ T5356] __alloc_frozen_pages_noprof+0x181/0x370 [ 77.146495][ T5356] alloc_pages_mpol+0x232/0x4a0 [ 77.148648][ T5356] allocate_slab+0x8a/0x370 [ 77.150582][ T5356] ___slab_alloc+0xbeb/0x1420 [ 77.152676][ T5356] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 77.155256][ T5356] __alloc_skb+0x112/0x2d0 [ 77.157253][ T5356] skb_copy+0x188/0x800 [ 77.159100][ T5356] mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0 [ 77.161797][ T5356] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 77.164225][ T5356] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 77.166688][ T5356] __iterate_interfaces+0x2a8/0x590 [ 77.168938][ T5356] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 77.171978][ T5356] mac80211_hwsim_beacon+0xbb/0x1c0 [ 77.174229][ T5356] __hrtimer_run_queues+0x529/0xc60 [ 77.176501][ T5356] page_owner free stack trace missing [ 77.178858][ T5356] [ 77.179924][ T5356] Memory state around the buggy address: [ 77.182367][ T5356] ffff888052cfaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.185828][ T5356] ffff888052cfaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.189187][ T5356] >ffff888052cfb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.192629][ T5356] ^ [ 77.194361][ T5356] ffff888052cfb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 77.197772][ T5356] ffff888052cfb100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 77.201377][ T5356] ================================================================== [ 77.364573][ T5356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.367813][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.371879][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.376131][ T5356] Call Trace: [ 77.377532][ T5356] [ 77.378797][ T5356] dump_stack_lvl+0x99/0x250 [ 77.380782][ T5356] ? __asan_memcpy+0x40/0x70 [ 77.382959][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.385235][ T5356] ? __pfx__printk+0x10/0x10 [ 77.387235][ T5356] vpanic+0x281/0x750 [ 77.389007][ T5356] ? preempt_schedule+0xae/0xc0 [ 77.391366][ T5356] ? __pfx_vpanic+0x10/0x10 [ 77.393341][ T5356] ? preempt_schedule_common+0x83/0xd0 [ 77.395715][ T5356] ? preempt_schedule+0xae/0xc0 [ 77.397687][ T5356] ? __pfx_preempt_schedule+0x10/0x10 [ 77.400011][ T5356] panic+0xb9/0xc0 [ 77.401753][ T5356] ? __pfx_panic+0x10/0x10 [ 77.403714][ T5356] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 77.406342][ T5356] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 77.408968][ T5356] check_panic_on_warn+0x89/0xb0 [ 77.411231][ T5356] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 77.413731][ T5356] end_report+0x78/0x160 [ 77.415537][ T5356] kasan_report+0x129/0x150 [ 77.417660][ T5356] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 77.420021][ T5356] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 77.422220][ T5356] ? kasan_save_track+0x4f/0x80 [ 77.424341][ T5356] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 77.426992][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.429055][ T5356] ? do_raw_spin_lock+0x121/0x290 [ 77.431187][ T5356] ocfs2_claim_metadata+0x178/0x4c0 [ 77.433517][ T5356] ? __pfx_ocfs2_claim_metadata+0x10/0x10 [ 77.436271][ T5356] ? rcu_is_watching+0x15/0xb0 [ 77.438255][ T5356] ? ocfs2_insert_extent+0x121b/0x1980 [ 77.440569][ T5356] ? kfree+0x4d/0x440 [ 77.442323][ T5356] ? __pfx_ocfs2_dinode_extent_map_insert+0x10/0x10 [ 77.445148][ T5356] ? ocfs2_insert_extent+0x1358/0x1980 [ 77.448356][ T5356] ocfs2_dx_dir_attach_index+0x1c1/0xd90 [ 77.450887][ T5356] ? jbd2_journal_dirty_metadata+0x356/0xc30 [ 77.453538][ T5356] ? __pfx_ocfs2_dx_dir_attach_index+0x10/0x10 [ 77.455893][ T5356] ? ocfs2_journal_dirty+0x471/0x740 [ 77.457995][ T5356] ? __pfx_ocfs2_journal_dirty+0x10/0x10 [ 77.460326][ T5356] ? __asan_memset+0x22/0x50 [ 77.462199][ T5356] ocfs2_extend_dir+0x3994/0x4870 [ 77.464254][ T5356] ? update_se+0x91/0x5f0 [ 77.466006][ T5356] ? __pfx_ocfs2_extend_dir+0x10/0x10 [ 77.468307][ T5356] ? __bfs+0x154/0x2a0 [ 77.470127][ T5356] ? __pfx_hlock_conflict+0x10/0x10 [ 77.472396][ T5356] ? check_noncircular+0xe0/0x160 [ 77.474587][ T5356] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 77.477223][ T5356] ? lockdep_unlock+0x89/0x120 [ 77.479356][ T5356] ? check_path+0x21/0x40 [ 77.481285][ T5356] ? check_noncircular+0xe0/0x160 [ 77.483502][ T5356] ? __bfs+0x154/0x2a0 [ 77.485295][ T5356] ? __pfx_usage_match+0x10/0x10 [ 77.487546][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.489729][ T5356] ? rcu_is_watching+0x15/0xb0 [ 77.491938][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 77.494244][ T5356] ? ocfs2_dx_dir_name_hash+0x229/0xaf0 [ 77.496711][ T5356] ? __asan_memcpy+0x40/0x70 [ 77.498778][ T5356] ? ocfs2_dx_dir_name_hash+0x9ba/0xaf0 [ 77.501224][ T5356] ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10 [ 77.503858][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 77.505817][ T5356] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 77.508430][ T5356] ? rcu_is_watching+0x15/0xb0 [ 77.510475][ T5356] ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10 [ 77.513139][ T5356] ? ocfs2_search_dirblock+0x381/0x850 [ 77.515367][ T5356] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 77.517845][ T5356] ? rcu_is_watching+0x15/0xb0 [ 77.520093][ T5356] ? ocfs2_buffer_cached+0x42a/0x8d0 [ 77.522391][ T5356] ? __brelse+0x59/0xa0 [ 77.523915][ T5356] ? ocfs2_find_entry+0xddb/0x2000 [ 77.526110][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.528254][ T5356] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 77.530513][ T5356] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 77.532874][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.534936][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.536848][ T5356] ? ocfs2_read_inode_block+0x11d/0x190 [ 77.539057][ T5356] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 77.541465][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 77.543262][ T5356] ? ocfs2_inode_lock_full_nested+0xabe/0x1b40 [ 77.545575][ T5356] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 77.548394][ T5356] ? __kernel_text_address+0xd/0x40 [ 77.550777][ T5356] ? unwind_get_return_address+0x4d/0x90 [ 77.553031][ T5356] ? ocfs2_check_dir_for_entry+0x239/0x3f0 [ 77.555564][ T5356] ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10 [ 77.558195][ T5356] ocfs2_symlink+0xaa4/0x23e0 [ 77.560281][ T5356] ? __pfx_ocfs2_symlink+0x10/0x10 [ 77.562363][ T5356] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 77.565125][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.567299][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.569450][ T5356] ? do_raw_spin_lock+0x121/0x290 [ 77.571670][ T5356] ? do_raw_spin_unlock+0x4d/0x240 [ 77.573872][ T5356] ? put_pid+0xe9/0x130 [ 77.575636][ T5356] ? ocfs2_permission+0x107/0x1b0 [ 77.577710][ T5356] ? __pfx_ocfs2_permission+0x10/0x10 [ 77.580072][ T5356] ? from_kgid+0x1b0/0x650 [ 77.581867][ T5356] ? __pfx_from_kgid+0x10/0x10 [ 77.583873][ T5356] ? __pfx_apparmor_path_symlink+0x10/0x10 [ 77.586299][ T5356] ? make_vfsgid+0x49/0xa0 [ 77.588258][ T5356] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 77.590055][ T5356] ? inode_permission+0x149/0x470 [ 77.591985][ T5356] ? __pfx_ocfs2_permission+0x10/0x10 [ 77.594050][ T5356] ? bpf_lsm_inode_symlink+0x9/0x20 [ 77.596214][ T5356] vfs_symlink+0x140/0x2f0 [ 77.598103][ T5356] do_symlinkat+0x1b1/0x3f0 [ 77.599946][ T5356] ? __pfx_do_symlinkat+0x10/0x10 [ 77.602159][ T5356] ? strncpy_from_user+0x150/0x290 [ 77.604252][ T5356] ? getname_flags+0x1e5/0x540 [ 77.606292][ T5356] __x64_sys_symlink+0x7a/0x90 [ 77.608385][ T5356] do_syscall_64+0xfa/0x3b0 [ 77.610329][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.612641][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.615298][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 77.617328][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.619760][ T5356] RIP: 0033:0x7fbe8678eec9 [ 77.621715][ T5356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.629482][ T5356] RSP: 002b:00007fbe8763b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 77.632851][ T5356] RAX: ffffffffffffffda RBX: 00007fbe869e5fa0 RCX: 00007fbe8678eec9 [ 77.636151][ T5356] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 00002000000003c0 [ 77.639416][ T5356] RBP: 00007fbe86811f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.642756][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.646079][ T5356] R13: 00007fbe869e6038 R14: 00007fbe869e5fa0 R15: 00007fff16dfeed8 [ 77.649725][ T5356] [ 77.651620][ T5356] Kernel Offset: disabled [ 77.653334][ T5356] Rebooting in 86400 seconds..