loop0: detected capacity change from 0 to 32768
JBD2: Ignoring recovery information on journal
ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:2569!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:_ocfs2_free_suballoc_bits+0x1084/0x1330 fs/ocfs2/suballoc.c:2569
Code: 89 f1 80 e1 07 fe c1 38 c1 0f 8c 4d fc ff ff 4c 89 f7 e8 0f 48 7c fe e9 40 fc ff ff e8 45 5e 17 fe 90 0f 0b e8 3d 5e 17 fe 90 <0f> 0b f3 0f 1e fa 65 44 8b 25 02 23 f8 0e bf 07 00 00 00 44 89 e6
RSP: 0018:ffffc9000d497680 EFLAGS: 00010287
RAX: ffffffff83a85d23 RBX: 0000000000008000 RCX: 0000000000100000
RDX: ffffc9000e2c2000 RSI: 000000000002944c RDI: 000000000002944d
RBP: ffffc9000d497828 R08: 000000000003f000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1f46cc7 R12: 0000000000000e00
R13: dffffc0000000000 R14: 000000000003f000 R15: 0000000000000e00
FS:  00007ff311fd06c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555f23282538 CR3: 000000003fefc000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 _ocfs2_free_clusters+0x5e4/0xa70 fs/ocfs2/suballoc.c:2672
 ocfs2_replay_truncate_records fs/ocfs2/alloc.c:5979 [inline]
 __ocfs2_flush_truncate_log+0x706/0x10e0 fs/ocfs2/alloc.c:6062
 ocfs2_flush_truncate_log fs/ocfs2/alloc.c:6084 [inline]
 ocfs2_truncate_log_shutdown+0x141/0x2f0 fs/ocfs2/alloc.c:6343
 ocfs2_dismount_volume+0x209/0x8d0 fs/ocfs2/super.c:1827
 generic_shutdown_super+0x135/0x2c0 fs/super.c:643
 kill_block_super+0x44/0x90 fs/super.c:1766
 deactivate_locked_super+0xb9/0x130 fs/super.c:474
 cleanup_mnt+0x425/0x4c0 fs/namespace.c:1378
 task_work_run+0x1d4/0x260 kernel/task_work.c:227
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 exit_to_user_mode_loop+0xec/0x110 kernel/entry/common.c:43
 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
 syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
 syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
 do_syscall_64+0x2bd/0x3b0 arch/x86/entry/syscall_64.c:100
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7ff31119038a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff311fcfe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffea RBX: 00007ff311fcfef0 RCX: 00007ff31119038a
RDX: 0000200000000040 RSI: 00002000000044c0 RDI: 00007ff311fcfeb0
RBP: 0000200000000040 R08: 00007ff311fcfef0 R09: 0000000000800403
R10: 0000000000800403 R11: 0000000000000246 R12: 00002000000044c0
R13: 00007ff311fcfeb0 R14: 0000000000004478 R15: 0000200000000380
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:_ocfs2_free_suballoc_bits+0x1084/0x1330 fs/ocfs2/suballoc.c:2569
Code: 89 f1 80 e1 07 fe c1 38 c1 0f 8c 4d fc ff ff 4c 89 f7 e8 0f 48 7c fe e9 40 fc ff ff e8 45 5e 17 fe 90 0f 0b e8 3d 5e 17 fe 90 <0f> 0b f3 0f 1e fa 65 44 8b 25 02 23 f8 0e bf 07 00 00 00 44 89 e6
RSP: 0018:ffffc9000d497680 EFLAGS: 00010287
RAX: ffffffff83a85d23 RBX: 0000000000008000 RCX: 0000000000100000
RDX: ffffc9000e2c2000 RSI: 000000000002944c RDI: 000000000002944d
RBP: ffffc9000d497828 R08: 000000000003f000 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff1f46cc7 R12: 0000000000000e00
R13: dffffc0000000000 R14: 000000000003f000 R15: 0000000000000e00
FS:  00007ff311fd06c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555f23282538 CR3: 000000003fefc000 CR4: 0000000000352ef0