------------[ cut here ]------------ kernel BUG at fs/ocfs2/suballoc.c:1443! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 8682 Comm: syz.2.440 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ocfs2_find_victim_chain fs/ocfs2/suballoc.c:1443 [inline] pc : ocfs2_claim_suballoc_bits+0x1df4/0x1e00 fs/ocfs2/suballoc.c:1996 lr : ocfs2_find_victim_chain fs/ocfs2/suballoc.c:1443 [inline] lr : ocfs2_claim_suballoc_bits+0x1df4/0x1e00 fs/ocfs2/suballoc.c:1996 sp : ffff80009ec26480 x29: ffff80009ec266c0 x28: ffff00010639d688 x27: ffff00010b61e200 x26: dfff800000000000 x25: ffff00010639d680 x24: ffff80009ec26760 x23: ffff700013d84ca8 x22: 000000000000ea80 x21: ffff80009ec26540 x20: 0000000000000000 x19: ffff00010b61e2c6 x18: 00000000ffffffff x17: ffff800093376000 x16: ffff80008aed468c x15: 0000000000000005 x14: 1ffff00013d84cec x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 000000000000fef9 x9 : ffff8000a5d3c000 x8 : 000000000000fefa x7 : 0000000000000000 x6 : ffff80009ec26940 x5 : ffff80009ec26910 x4 : ffff80009ec26760 x3 : 0000000000000001 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: ocfs2_find_victim_chain fs/ocfs2/suballoc.c:1443 [inline] (P) ocfs2_claim_suballoc_bits+0x1df4/0x1e00 fs/ocfs2/suballoc.c:1996 (P) ocfs2_claim_metadata+0x150/0x444 fs/ocfs2/suballoc.c:2082 ocfs2_create_xattr_block+0x180/0x940 fs/ocfs2/xattr.c:2883 ocfs2_xattr_block_set+0x1e8/0x2568 fs/ocfs2/xattr.c:2965 __ocfs2_xattr_set_handle+0x554/0xc28 fs/ocfs2/xattr.c:3387 ocfs2_xattr_set_handle+0x378/0x5e4 fs/ocfs2/xattr.c:3512 ocfs2_init_security_set+0xb4/0xd8 fs/ocfs2/xattr.c:7307 ocfs2_mknod+0x106c/0x1cf0 fs/ocfs2/namei.c:419 ocfs2_create+0x190/0x474 fs/ocfs2/namei.c:673 lookup_open fs/namei.c:3717 [inline] open_last_lookups fs/namei.c:3816 [inline] path_openat+0x12d8/0x2c40 fs/namei.c:4052 do_filp_open+0x18c/0x36c fs/namei.c:4082 do_sys_openat2+0x11c/0x1b4 fs/open.c:1437 do_sys_open fs/open.c:1452 [inline] __do_sys_openat fs/open.c:1468 [inline] __se_sys_openat fs/open.c:1463 [inline] __arm64_sys_openat+0x120/0x158 fs/open.c:1463 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 Code: d4210000 9796c4ec d4210000 9796c4ea (d4210000) ---[ end trace 0000000000000000 ]---