------------[ cut here ]------------ kernel BUG at fs/ocfs2/suballoc.c:804! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 78 65 62 fe e9 63 dd ff ff e8 9e b8 41 08 e8 b9 2a fb fd 90 <0f> 0b e8 b1 2a fb fd 48 c7 c7 60 03 04 8f 48 8b 74 24 20 48 89 da RSP: 0018:ffffc9000d126a20 EFLAGS: 00010293 RAX: ffffffff83c69487 RBX: 00000000ffffffff RCX: ffff888000ad8000 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d126f10 R08: ffffffff83c64f65 R09: 1ffffffff2079dae R10: dffffc0000000000 R11: fffffbfff2079daf R12: 1ffff92001a24dc4 R13: ffff888036bedc00 R14: ffff888040fc6e00 R15: dffffc0000000000 FS: 0000555571525500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000400000002a40 CR3: 00000000338b2000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ocfs2_reserve_cluster_bitmap_bits fs/ocfs2/suballoc.c:1132 [inline] ocfs2_reserve_clusters_with_limit+0x3dd/0xb60 fs/ocfs2/suballoc.c:1177 ocfs2_reserve_clusters fs/ocfs2/suballoc.c:1227 [inline] ocfs2_lock_allocators+0x30a/0x630 fs/ocfs2/suballoc.c:2746 ocfs2_write_begin_nolock+0x28fe/0x4e40 fs/ocfs2/aops.c:1725 __ocfs2_page_mkwrite fs/ocfs2/mmap.c:93 [inline] ocfs2_page_mkwrite+0x6d9/0xda0 fs/ocfs2/mmap.c:144 do_page_mkwrite+0x15c/0x350 mm/memory.c:3255 do_shared_fault mm/memory.c:5479 [inline] do_fault mm/memory.c:5541 [inline] do_pte_missing mm/memory.c:4058 [inline] handle_pte_fault mm/memory.c:5900 [inline] __handle_mm_fault+0x22e2/0x70f0 mm/memory.c:6043 handle_mm_fault+0x3e5/0x8d0 mm/memory.c:6212 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2b9/0x8b0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f6bd8c63799 Code: ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 c8 fe ff ff e8 48 59 0c 00 85 c0 75 10 48 8b 44 24 68 48 8b b4 24 98 00 00 00 <48> 89 30 64 f0 83 2c 25 90 ff ff ff 01 48 8b 84 24 80 00 00 00 48 RSP: 002b:00007ffe40573140 EFLAGS: 00010246 RAX: 0000400000002a40 RBX: 0000000000000002 RCX: ffffc00000000000 RDX: 5468b59232e0aa5b RSI: 0000000000000000 RDI: 00005555715253c8 RBP: 00007f6bd8fa7ba0 R08: 00007f6bd8bff02c R09: 000000000000001f R10: 0000000000000001 R11: 0000000000000006 R12: 00007f6bd8fa5fac R13: 00007f6bd8fa5fa0 R14: fffffffffffffffe R15: 00007ffe40573250 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 78 65 62 fe e9 63 dd ff ff e8 9e b8 41 08 e8 b9 2a fb fd 90 <0f> 0b e8 b1 2a fb fd 48 c7 c7 60 03 04 8f 48 8b 74 24 20 48 89 da RSP: 0018:ffffc9000d126a20 EFLAGS: 00010293 RAX: ffffffff83c69487 RBX: 00000000ffffffff RCX: ffff888000ad8000 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d126f10 R08: ffffffff83c64f65 R09: 1ffffffff2079dae R10: dffffc0000000000 R11: fffffbfff2079daf R12: 1ffff92001a24dc4 R13: ffff888036bedc00 R14: ffff888040fc6e00 R15: dffffc0000000000 FS: 0000555571525500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000400000002a40 CR3: 00000000338b2000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400