program: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x140) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000780)='./file1\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x444a, &(0x7f00000088c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x10, 0x700, 0x5, 0xd4, {{0x33, 0x4, 0x2, 0x9, 0xcc, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xa, "1e717d8ea4ac012b"}, @timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0xd, [{@multicast2, 0x9}, {@remote, 0x80000000}]}, @timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x9, [{@multicast2, 0x1}, {@remote}, {@empty, 0x8}, {@multicast2, 0x9}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3ff}]}, @noop, @cipso={0x86, 0x52, 0x0, [{0x0, 0x5, "e13c87"}, {0x1, 0x2}, {0x0, 0xb, "607258d9c82f012a48"}, {0x5, 0xa, "39bcf72b9d201b2b"}, {0x7, 0x6, "0718f762"}, {0x1, 0x6, "b17ee1ac"}, {0x6, 0x5, 'zL\x00'}, {0x1, 0x3, "bc"}, {0x6, 0xb, "d95b65df0a345858c3"}, {0x7, 0x11, "d4eb28a4de27662aab39049de98955"}]}, @lsrr={0x83, 0xb, 0xd4, [@rand_addr=0x64010102, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x454, 0x9, {{0xb, 0x4, 0x3, 0x1f, 0x2c, 0x64, 0x0, 0x10, 0x4, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x4, [{@multicast2, 0x97}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x9}]}]}}}}}) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r12}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) [ 71.151980][ T4670] Bluetooth: hci0: command tx timeout [ 71.455251][ T5323] loop0: detected capacity change from 0 to 32768 [ 71.493212][ T5323] ================================================================== [ 71.496507][ T5323] BUG: KASAN: use-after-free in __ocfs2_find_path+0x203/0x7e0 [ 71.499503][ T5323] Read of size 4 at addr ffff888051420000 by task syz.0.0/5323 [ 71.502348][ T5323] [ 71.503282][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 71.506472][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.510518][ T5323] Call Trace: [ 71.511741][ T5323] [ 71.512882][ T5323] dump_stack_lvl+0x241/0x360 [ 71.514553][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.516565][ T5323] ? __pfx__printk+0x10/0x10 [ 71.518367][ T5323] ? _printk+0xd5/0x120 [ 71.519983][ T5323] ? __virt_addr_valid+0x183/0x530 [ 71.521942][ T5323] ? __virt_addr_valid+0x183/0x530 [ 71.523768][ T5323] print_report+0x169/0x550 [ 71.525464][ T5323] ? __virt_addr_valid+0x183/0x530 [ 71.527555][ T5323] ? __virt_addr_valid+0x183/0x530 [ 71.529413][ T5323] ? __virt_addr_valid+0x45f/0x530 [ 71.531371][ T5323] ? __phys_addr+0xba/0x170 [ 71.533095][ T5323] ? __ocfs2_find_path+0x203/0x7e0 [ 71.535073][ T5323] kasan_report+0x143/0x180 [ 71.536670][ T5323] ? __ocfs2_find_path+0x203/0x7e0 [ 71.538521][ T5323] __ocfs2_find_path+0x203/0x7e0 [ 71.540462][ T5323] ? __pfx_find_leaf_ins+0x10/0x10 [ 71.542458][ T5323] ? __pfx___ocfs2_find_path+0x10/0x10 [ 71.544587][ T5323] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 71.546653][ T5323] ocfs2_find_leaf+0xcf/0x230 [ 71.548264][ T5323] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 71.550134][ T5323] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 71.552260][ T5323] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 71.554198][ T5323] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 71.556230][ T5323] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 71.558182][ T5323] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 71.560280][ T5323] ? do_raw_spin_unlock+0x58/0x8b0 [ 71.562208][ T5323] ocfs2_get_clusters+0x5bd/0xbd0 [ 71.564229][ T5323] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 71.566348][ T5323] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.568575][ T5323] ? __pfx_lock_acquire+0x10/0x10 [ 71.570461][ T5323] ? unwind_get_return_address+0x4d/0x90 [ 71.573786][ T5323] ? arch_stack_walk+0xfd/0x150 [ 71.575764][ T5323] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 71.578138][ T5323] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 71.580561][ T5323] ? __pfx_check_noncircular+0x10/0x10 [ 71.582656][ T5323] ocfs2_read_virt_blocks+0x313/0xb20 [ 71.584777][ T5323] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 71.587134][ T5323] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 71.589455][ T5323] ocfs2_find_entry+0x43b/0x2780 [ 71.591452][ T5323] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 71.593542][ T5323] ? mark_lock+0x2ae/0x360 [ 71.595363][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.597281][ T5323] ? format_decode+0xc5f/0x1bb0 [ 71.599247][ T5323] ? __pfx_format_decode+0x10/0x10 [ 71.601019][ T5323] ? string+0x26a/0x2b0 [ 71.602511][ T5323] ? widen_string+0x3a/0x310 [ 71.604275][ T5323] ? string+0x26a/0x2b0 [ 71.605824][ T5323] ? vsnprintf+0x1ccd/0x1da0 [ 71.607622][ T5323] ocfs2_find_files_on_disk+0xff/0x360 [ 71.609767][ T5323] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 71.611941][ T5323] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 71.614243][ T5323] ? kasan_save_track+0x51/0x80 [ 71.616102][ T5323] ? kasan_save_track+0x3f/0x80 [ 71.617848][ T5323] ? __kasan_kmalloc+0x98/0xb0 [ 71.619684][ T5323] ? ocfs2_new_dlm_debug+0x97/0x200 [ 71.621610][ T5323] ocfs2_get_system_file_inode+0x305/0x7b0 [ 71.623853][ T5323] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 71.626250][ T5323] ocfs2_init_global_system_inodes+0x32c/0x730 [ 71.628524][ T5323] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 71.631154][ T5323] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 71.633272][ T5323] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 71.635263][ T5323] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 71.637469][ T5323] ? rcu_is_watching+0x15/0xb0 [ 71.639274][ T5323] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 71.641281][ T5323] ocfs2_fill_super+0x2f47/0x5750 [ 71.643014][ T5323] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 71.644988][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.647053][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.649075][ T5323] ? validate_chain+0x11e/0x5920 [ 71.650969][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.652946][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.655178][ T5323] ? string+0x26a/0x2b0 [ 71.656877][ T5323] ? widen_string+0x3a/0x310 [ 71.658663][ T5323] ? string+0x26a/0x2b0 [ 71.660340][ T5323] ? bdev_name+0x2b1/0x3c0 [ 71.662053][ T5323] ? pointer+0x703/0x1210 [ 71.663786][ T5323] ? __pfx_pointer+0x10/0x10 [ 71.665541][ T5323] ? __pfx_format_decode+0x10/0x10 [ 71.667510][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.669442][ T5323] ? vsnprintf+0x1ccd/0x1da0 [ 71.671233][ T5323] ? snprintf+0xda/0x120 [ 71.672892][ T5323] ? __pfx_lock_release+0x10/0x10 [ 71.674884][ T5323] ? do_raw_spin_lock+0x14f/0x370 [ 71.676869][ T5323] ? __pfx_snprintf+0x10/0x10 [ 71.678766][ T5323] ? set_blocksize+0x1f9/0x360 [ 71.680558][ T5323] ? sb_set_blocksize+0x98/0xf0 [ 71.682383][ T5323] ? setup_bdev_super+0x4e6/0x5d0 [ 71.684259][ T5323] mount_bdev+0x20a/0x2d0 [ 71.685927][ T5323] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 71.688019][ T5323] ? __pfx_mount_bdev+0x10/0x10 [ 71.689953][ T5323] ? vfs_parse_fs_string+0x190/0x230 [ 71.692018][ T5323] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 71.694082][ T5323] legacy_get_tree+0xee/0x190 [ 71.695836][ T5323] ? __pfx_ocfs2_mount+0x10/0x10 [ 71.697695][ T5323] vfs_get_tree+0x90/0x2b0 [ 71.699302][ T5323] do_new_mount+0x2be/0xb40 [ 71.701090][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 71.703060][ T5323] __se_sys_mount+0x2d6/0x3c0 [ 71.704833][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 71.706347][ T5323] ? exc_page_fault+0x590/0x8c0 [ 71.708041][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 71.709778][ T5323] do_syscall_64+0xf3/0x230 [ 71.711507][ T5323] ? clear_bhb_loop+0x35/0x90 [ 71.713207][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.715462][ T5323] RIP: 0033:0x7fe46b97feba [ 71.717180][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.724441][ T5323] RSP: 002b:00007fe46c6b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.728010][ T5323] RAX: ffffffffffffffda RBX: 00007fe46c6b2ef0 RCX: 00007fe46b97feba [ 71.731350][ T5323] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007fe46c6b2eb0 [ 71.734731][ T5323] RBP: 0000000020004440 R08: 00007fe46c6b2ef0 R09: 0000000001000000 [ 71.738143][ T5323] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 71.741037][ T5323] R13: 00007fe46c6b2eb0 R14: 000000000000444a R15: 00000000200005c0 [ 71.744109][ T5323] [ 71.745307][ T5323] [ 71.746083][ T5323] The buggy address belongs to the physical page: [ 71.748321][ T5323] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51420 [ 71.751429][ T5323] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 71.753700][ T5323] raw: 04fff00000000000 ffffea0001450848 ffff88801fc44cb0 0000000000000000 [ 71.756796][ T5323] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 71.759870][ T5323] page dumped because: kasan: bad access detected [ 71.762283][ T5323] page_owner info is not present (never set?) [ 71.764440][ T5323] [ 71.765325][ T5323] Memory state around the buggy address: [ 71.767392][ T5323] ffff88805141ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.770404][ T5323] ffff88805141ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 71.773257][ T5323] >ffff888051420000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 71.776179][ T5323] ^ [ 71.777800][ T5323] ffff888051420080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 71.780551][ T5323] ffff888051420100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 71.783433][ T5323] ================================================================== [ 71.809046][ T5323] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.811934][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller #0 [ 71.815305][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.819186][ T5323] Call Trace: [ 71.820247][ T5323] [ 71.821296][ T5323] dump_stack_lvl+0x241/0x360 [ 71.823235][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.825250][ T5323] ? __pfx__printk+0x10/0x10 [ 71.827025][ T5323] ? preempt_schedule+0xe1/0xf0 [ 71.828880][ T5323] ? vscnprintf+0x5d/0x90 [ 71.830483][ T5323] panic+0x349/0x880 [ 71.831947][ T5323] ? check_panic_on_warn+0x21/0xb0 [ 71.833943][ T5323] ? __pfx_panic+0x10/0x10 [ 71.835676][ T5323] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 71.837965][ T5323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.840296][ T5323] ? print_report+0x502/0x550 [ 71.842021][ T5323] check_panic_on_warn+0x86/0xb0 [ 71.843856][ T5323] ? __ocfs2_find_path+0x203/0x7e0 [ 71.845715][ T5323] end_report+0x77/0x160 [ 71.847329][ T5323] kasan_report+0x154/0x180 [ 71.849008][ T5323] ? __ocfs2_find_path+0x203/0x7e0 [ 71.850846][ T5323] __ocfs2_find_path+0x203/0x7e0 [ 71.852851][ T5323] ? __pfx_find_leaf_ins+0x10/0x10 [ 71.854775][ T5323] ? __pfx___ocfs2_find_path+0x10/0x10 [ 71.856807][ T5323] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 71.859466][ T5323] ocfs2_find_leaf+0xcf/0x230 [ 71.861617][ T5323] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 71.864077][ T5323] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 71.866818][ T5323] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 71.868994][ T5323] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 71.871292][ T5323] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 71.873345][ T5323] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 71.875535][ T5323] ? do_raw_spin_unlock+0x58/0x8b0 [ 71.877449][ T5323] ocfs2_get_clusters+0x5bd/0xbd0 [ 71.879310][ T5323] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 71.881202][ T5323] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 71.883420][ T5323] ? __pfx_lock_acquire+0x10/0x10 [ 71.885251][ T5323] ? unwind_get_return_address+0x4d/0x90 [ 71.887412][ T5323] ? arch_stack_walk+0xfd/0x150 [ 71.889197][ T5323] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 71.891310][ T5323] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 71.893584][ T5323] ? __pfx_check_noncircular+0x10/0x10 [ 71.895750][ T5323] ocfs2_read_virt_blocks+0x313/0xb20 [ 71.897720][ T5323] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 71.900100][ T5323] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 71.902303][ T5323] ocfs2_find_entry+0x43b/0x2780 [ 71.904001][ T5323] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 71.905897][ T5323] ? mark_lock+0x2ae/0x360 [ 71.907509][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.909395][ T5323] ? format_decode+0xc5f/0x1bb0 [ 71.911170][ T5323] ? __pfx_format_decode+0x10/0x10 [ 71.913143][ T5323] ? string+0x26a/0x2b0 [ 71.914754][ T5323] ? widen_string+0x3a/0x310 [ 71.916552][ T5323] ? string+0x26a/0x2b0 [ 71.918108][ T5323] ? vsnprintf+0x1ccd/0x1da0 [ 71.919841][ T5323] ocfs2_find_files_on_disk+0xff/0x360 [ 71.921908][ T5323] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 71.923969][ T5323] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 71.926230][ T5323] ? kasan_save_track+0x51/0x80 [ 71.928053][ T5323] ? kasan_save_track+0x3f/0x80 [ 71.929766][ T5323] ? __kasan_kmalloc+0x98/0xb0 [ 71.931572][ T5323] ? ocfs2_new_dlm_debug+0x97/0x200 [ 71.933417][ T5323] ocfs2_get_system_file_inode+0x305/0x7b0 [ 71.935624][ T5323] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 71.938066][ T5323] ocfs2_init_global_system_inodes+0x32c/0x730 [ 71.940411][ T5323] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 71.942894][ T5323] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 71.945041][ T5323] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 71.947022][ T5323] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 71.949237][ T5323] ? rcu_is_watching+0x15/0xb0 [ 71.951104][ T5323] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 71.953469][ T5323] ocfs2_fill_super+0x2f47/0x5750 [ 71.955380][ T5323] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 71.957397][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.959345][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.961335][ T5323] ? validate_chain+0x11e/0x5920 [ 71.963249][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.965225][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 71.967151][ T5323] ? string+0x26a/0x2b0 [ 71.968786][ T5323] ? widen_string+0x3a/0x310 [ 71.970588][ T5323] ? string+0x26a/0x2b0 [ 71.972188][ T5323] ? bdev_name+0x2b1/0x3c0 [ 71.973867][ T5323] ? pointer+0x703/0x1210 [ 71.975519][ T5323] ? __pfx_pointer+0x10/0x10 [ 71.977129][ T5323] ? __pfx_format_decode+0x10/0x10 [ 71.978957][ T5323] ? __lock_acquire+0x1384/0x2050 [ 71.980873][ T5323] ? vsnprintf+0x1ccd/0x1da0 [ 71.982642][ T5323] ? snprintf+0xda/0x120 [ 71.984320][ T5323] ? __pfx_lock_release+0x10/0x10 [ 71.986273][ T5323] ? do_raw_spin_lock+0x14f/0x370 [ 71.988134][ T5323] ? __pfx_snprintf+0x10/0x10 [ 71.989950][ T5323] ? set_blocksize+0x1f9/0x360 [ 71.991742][ T5323] ? sb_set_blocksize+0x98/0xf0 [ 71.993418][ T5323] ? setup_bdev_super+0x4e6/0x5d0 [ 71.995324][ T5323] mount_bdev+0x20a/0x2d0 [ 71.996999][ T5323] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 71.999028][ T5323] ? __pfx_mount_bdev+0x10/0x10 [ 72.000864][ T5323] ? vfs_parse_fs_string+0x190/0x230 [ 72.002834][ T5323] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 72.005023][ T5323] legacy_get_tree+0xee/0x190 [ 72.006857][ T5323] ? __pfx_ocfs2_mount+0x10/0x10 [ 72.008638][ T5323] vfs_get_tree+0x90/0x2b0 [ 72.010379][ T5323] do_new_mount+0x2be/0xb40 [ 72.012134][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 72.014060][ T5323] __se_sys_mount+0x2d6/0x3c0 [ 72.015990][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 72.018011][ T5323] ? exc_page_fault+0x590/0x8c0 [ 72.019884][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 72.021792][ T5323] do_syscall_64+0xf3/0x230 [ 72.023475][ T5323] ? clear_bhb_loop+0x35/0x90 [ 72.025393][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.027652][ T5323] RIP: 0033:0x7fe46b97feba [ 72.029374][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.036705][ T5323] RSP: 002b:00007fe46c6b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.039744][ T5323] RAX: ffffffffffffffda RBX: 00007fe46c6b2ef0 RCX: 00007fe46b97feba [ 72.042557][ T5323] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007fe46c6b2eb0 [ 72.045275][ T5323] RBP: 0000000020004440 R08: 00007fe46c6b2ef0 R09: 0000000001000000 [ 72.048596][ T5323] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 72.052154][ T5323] R13: 00007fe46c6b2eb0 R14: 000000000000444a R15: 00000000200005c0 [ 72.055102][ T5323] [ 72.056430][ T5323] Kernel Offset: disabled [ 72.057959][ T5323] Rebooting in 86400 seconds..