program: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) unshare(0x44000800) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4456, &(0x7f0000004480)="$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") r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 71.550190][ T4664] Bluetooth: hci0: command tx timeout [ 71.970620][ T5325] loop0: detected capacity change from 0 to 32768 [ 71.983248][ T5325] ======================================================= [ 71.983248][ T5325] WARNING: The mand mount option has been deprecated and [ 71.983248][ T5325] and is ignored by this kernel. Remove the mand [ 71.983248][ T5325] option from the mount to silence this warning. [ 71.983248][ T5325] ======================================================= [ 72.104039][ T5325] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 72.119733][ T5325] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 72.143768][ T5325] ================================================================== [ 72.146972][ T5325] BUG: KASAN: slab-out-of-bounds in ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.151503][ T5325] Read of size 4 at addr ffff888043578610 by task syz.0.0/5325 [ 72.154849][ T5325] [ 72.155893][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 72.155906][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.155913][ T5325] Call Trace: [ 72.155919][ T5325] [ 72.155926][ T5325] dump_stack_lvl+0x241/0x360 [ 72.155947][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.155961][ T5325] ? __pfx__printk+0x10/0x10 [ 72.155975][ T5325] ? _printk+0xd5/0x120 [ 72.155985][ T5325] ? __virt_addr_valid+0x183/0x530 [ 72.155996][ T5325] ? __virt_addr_valid+0x183/0x530 [ 72.156007][ T5325] print_report+0x16e/0x5b0 [ 72.156025][ T5325] ? __virt_addr_valid+0x183/0x530 [ 72.156037][ T5325] ? __virt_addr_valid+0x183/0x530 [ 72.156047][ T5325] ? __virt_addr_valid+0x45f/0x530 [ 72.156059][ T5325] ? __phys_addr+0xba/0x170 [ 72.156080][ T5325] ? ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.156100][ T5325] kasan_report+0x143/0x180 [ 72.156113][ T5325] ? folio_mark_accessed+0x54f/0xa90 [ 72.156134][ T5325] ? ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.156152][ T5325] ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.156174][ T5325] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 72.156194][ T5325] ? jbd2_journal_dirty_metadata+0x6dc/0xc00 [ 72.156209][ T5325] ? __pfx_lock_release+0x10/0x10 [ 72.156226][ T5325] ? __jbd2_journal_temp_unlink_buffer+0x40c/0x4f0 [ 72.156245][ T5325] __ocfs2_claim_clusters+0x332/0xa40 [ 72.156259][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 72.156324][ T5325] ? jbd2_journal_dirty_metadata+0x6dc/0xc00 [ 72.156341][ T5325] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 72.156355][ T5325] ? ocfs2_sync_local_to_main+0x1e5/0xbc0 [ 72.156370][ T5325] ? __pfx_ocfs2_sync_local_to_main+0x10/0x10 [ 72.156382][ T5325] ? trace_kmalloc+0x1f/0xd0 [ 72.156394][ T5325] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 72.156410][ T5325] ? kmemdup_noprof+0x55/0x70 [ 72.156445][ T5325] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 72.156462][ T5325] ? ocfs2_claim_clusters+0x2e/0xb0 [ 72.156480][ T5325] ocfs2_reserve_local_alloc_bits+0x146b/0x28d0 [ 72.156499][ T5325] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 72.156516][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.156530][ T5325] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 72.156542][ T5325] ? __pfx_lock_release+0x10/0x10 [ 72.156558][ T5325] ? do_raw_spin_lock+0x14f/0x370 [ 72.156570][ T5325] ? do_raw_spin_unlock+0x58/0x8b0 [ 72.156584][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 72.156595][ T5325] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 72.156608][ T5325] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60 [ 72.156623][ T5325] ? mark_lock+0x9a/0x360 [ 72.156633][ T5325] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 72.156650][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.156667][ T5325] ? ocfs2_num_free_extents+0x3b8/0x6d0 [ 72.156687][ T5325] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 72.156704][ T5325] ocfs2_lock_allocators+0x30a/0x630 [ 72.156719][ T5325] ? __pfx_ocfs2_lock_allocators+0x10/0x10 [ 72.156736][ T5325] ? ocfs2_write_begin_nolock+0x1162/0x4e40 [ 72.156749][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.156758][ T5325] ? ocfs2_write_begin_nolock+0x1162/0x4e40 [ 72.156771][ T5325] ? __kmalloc_cache_noprof+0x243/0x390 [ 72.156785][ T5325] ocfs2_write_begin_nolock+0x28fe/0x4e40 [ 72.156809][ T5325] ? __pfx_ocfs2_write_begin_nolock+0x10/0x10 [ 72.156826][ T5325] ? mark_lock+0x2ae/0x360 [ 72.156835][ T5325] ? __lock_acquire+0x1397/0x2100 [ 72.156851][ T5325] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 72.156870][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.156885][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.156900][ T5325] ? __pfx___might_resched+0x10/0x10 [ 72.156913][ T5325] ? irqentry_exit+0x63/0x90 [ 72.156924][ T5325] ? irqentry_exit+0x63/0x90 [ 72.156932][ T5325] ? exc_page_fault+0x590/0x8b0 [ 72.156944][ T5325] ? down_write+0x18c/0x220 [ 72.156957][ T5325] ? __pfx_down_write+0x10/0x10 [ 72.156972][ T5325] ocfs2_write_begin+0x205/0x3a0 [ 72.156985][ T5325] ? __pfx_ocfs2_write_begin+0x10/0x10 [ 72.157000][ T5325] ? fault_in_iov_iter_readable+0x229/0x280 [ 72.157014][ T5325] generic_perform_write+0x346/0x990 [ 72.157027][ T5325] ? __pfx_generic_perform_write+0x10/0x10 [ 72.157039][ T5325] ? file_update_time+0x2ab/0x450 [ 72.157050][ T5325] ? __generic_file_write_iter+0x102/0x230 [ 72.157061][ T5325] ? ocfs2_file_write_iter+0x1989/0x2180 [ 72.157078][ T5325] ocfs2_file_write_iter+0x19af/0x2180 [ 72.157100][ T5325] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 72.157114][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.157130][ T5325] ? rcu_read_lock_any_held+0xb7/0x160 [ 72.157142][ T5325] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 72.157157][ T5325] vfs_write+0xacf/0xd10 [ 72.157168][ T5325] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 72.157182][ T5325] ? __pfx_vfs_write+0x10/0x10 [ 72.157193][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.157206][ T5325] ksys_write+0x18f/0x2b0 [ 72.157216][ T5325] ? __pfx_ksys_write+0x10/0x10 [ 72.157227][ T5325] ? do_syscall_64+0x100/0x230 [ 72.157241][ T5325] ? do_syscall_64+0xb6/0x230 [ 72.157256][ T5325] do_syscall_64+0xf3/0x230 [ 72.157271][ T5325] ? clear_bhb_loop+0x35/0x90 [ 72.157287][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.157302][ T5325] RIP: 0033:0x7f7981f8d169 [ 72.157315][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.157326][ T5325] RSP: 002b:00007f7982ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.157340][ T5325] RAX: ffffffffffffffda RBX: 00007f79821a5fa0 RCX: 00007f7981f8d169 [ 72.157351][ T5325] RDX: 000000000208e24b RSI: 0000400000000040 RDI: 0000000000000006 [ 72.157359][ T5325] RBP: 00007f798200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.157368][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.157375][ T5325] R13: 0000000000000000 R14: 00007f79821a5fa0 R15: 00007ffc89838868 [ 72.157388][ T5325] [ 72.157393][ T5325] [ 72.405615][ T5325] Allocated by task 4728: [ 72.408031][ T5325] kasan_save_track+0x3f/0x80 [ 72.410325][ T5325] __kasan_slab_alloc+0x66/0x80 [ 72.412302][ T5325] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 72.414544][ T5325] shmem_alloc_inode+0x28/0x40 [ 72.416481][ T5325] alloc_inode+0x65/0x1a0 [ 72.418238][ T5325] new_inode+0x22/0x1d0 [ 72.419956][ T5325] shmem_get_inode+0x39d/0xf20 [ 72.422152][ T5325] shmem_symlink+0x12c/0x610 [ 72.424355][ T5325] vfs_symlink+0x137/0x2e0 [ 72.426379][ T5325] do_symlinkat+0x222/0x3a0 [ 72.428404][ T5325] __x64_sys_symlink+0x7a/0x90 [ 72.430414][ T5325] do_syscall_64+0xf3/0x230 [ 72.432305][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.434607][ T5325] [ 72.435618][ T5325] The buggy address belongs to the object at ffff888043578000 [ 72.435618][ T5325] which belongs to the cache shmem_inode_cache of size 1544 [ 72.442430][ T5325] The buggy address is located 8 bytes to the right of [ 72.442430][ T5325] allocated 1544-byte region [ffff888043578000, ffff888043578608) [ 72.448528][ T5325] [ 72.449464][ T5325] The buggy address belongs to the physical page: [ 72.451937][ T5325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888043579a20 pfn:0x43578 [ 72.455841][ T5325] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 72.459453][ T5325] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 72.464178][ T5325] page_type: f5(slab) [ 72.466304][ T5325] raw: 04fff00000000240 ffff88801c6e7280 ffffea0000fcac10 ffff88803040aac8 [ 72.469569][ T5325] raw: ffff888043579a20 0000000000130011 00000000f5000000 0000000000000000 [ 72.472972][ T5325] head: 04fff00000000240 ffff88801c6e7280 ffffea0000fcac10 ffff88803040aac8 [ 72.476209][ T5325] head: ffff888043579a20 0000000000130011 00000000f5000000 0000000000000000 [ 72.479736][ T5325] head: 04fff00000000003 ffffea00010d5e01 ffffffffffffffff 0000000000000000 [ 72.484104][ T5325] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 72.487531][ T5325] page dumped because: kasan: bad access detected [ 72.490017][ T5325] page_owner tracks the page as allocated [ 72.492560][ T5325] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4728, tgid 4728 (udevd), ts 36513865124, free_ts 36497487773 [ 72.500829][ T5325] post_alloc_hook+0x1f4/0x240 [ 72.502704][ T5325] get_page_from_freelist+0x365c/0x37a0 [ 72.505031][ T5325] __alloc_frozen_pages_noprof+0x292/0x710 [ 72.507771][ T5325] alloc_pages_mpol+0x311/0x660 [ 72.509907][ T5325] allocate_slab+0x8f/0x3a0 [ 72.511816][ T5325] ___slab_alloc+0xc27/0x14a0 [ 72.513607][ T5325] __slab_alloc+0x58/0xa0 [ 72.515285][ T5325] kmem_cache_alloc_lru_noprof+0x26c/0x390 [ 72.517594][ T5325] shmem_alloc_inode+0x28/0x40 [ 72.519403][ T5325] alloc_inode+0x65/0x1a0 [ 72.521148][ T5325] new_inode+0x22/0x1d0 [ 72.523353][ T5325] shmem_get_inode+0x39d/0xf20 [ 72.526080][ T5325] shmem_symlink+0x12c/0x610 [ 72.528516][ T5325] vfs_symlink+0x137/0x2e0 [ 72.530602][ T5325] do_symlinkat+0x222/0x3a0 [ 72.532427][ T5325] __x64_sys_symlink+0x7a/0x90 [ 72.534280][ T5325] page last free pid 4731 tgid 4731 stack trace: [ 72.536627][ T5325] free_frozen_pages+0xe0d/0x10e0 [ 72.538694][ T5325] __put_partials+0x160/0x1c0 [ 72.540611][ T5325] put_cpu_partial+0x17c/0x250 [ 72.542399][ T5325] __slab_free+0x290/0x380 [ 72.544033][ T5325] qlist_free_all+0x9a/0x140 [ 72.545815][ T5325] kasan_quarantine_reduce+0x14f/0x170 [ 72.547905][ T5325] __kasan_slab_alloc+0x23/0x80 [ 72.549580][ T5325] kmem_cache_alloc_noprof+0x1d9/0x380 [ 72.552203][ T5325] getname_flags+0xb7/0x540 [ 72.554112][ T5325] do_sys_openat2+0xd2/0x1d0 [ 72.556246][ T5325] __x64_sys_openat+0x247/0x2a0 [ 72.558040][ T5325] do_syscall_64+0xf3/0x230 [ 72.559805][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.562088][ T5325] [ 72.563154][ T5325] Memory state around the buggy address: [ 72.565769][ T5325] ffff888043578500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.569552][ T5325] ffff888043578580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.572653][ T5325] >ffff888043578600: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.575715][ T5325] ^ [ 72.577549][ T5325] ffff888043578680: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.580325][ T5325] ffff888043578700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.583625][ T5325] ================================================================== [ 72.633812][ T5325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.636655][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 72.640442][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.644432][ T5325] Call Trace: [ 72.645744][ T5325] [ 72.646928][ T5325] dump_stack_lvl+0x241/0x360 [ 72.649116][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.652422][ T5325] ? __pfx__printk+0x10/0x10 [ 72.655501][ T5325] ? preempt_schedule+0xe1/0xf0 [ 72.657739][ T5325] ? vscnprintf+0x5d/0x90 [ 72.659382][ T5325] panic+0x349/0x880 [ 72.660885][ T5325] ? check_panic_on_warn+0x21/0xb0 [ 72.662838][ T5325] ? __pfx_panic+0x10/0x10 [ 72.664568][ T5325] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 72.666906][ T5325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.669547][ T5325] ? print_report+0x519/0x5b0 [ 72.671406][ T5325] check_panic_on_warn+0x86/0xb0 [ 72.673432][ T5325] ? ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.675982][ T5325] end_report+0x77/0x160 [ 72.678001][ T5325] kasan_report+0x154/0x180 [ 72.680180][ T5325] ? folio_mark_accessed+0x54f/0xa90 [ 72.682615][ T5325] ? ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.684974][ T5325] ocfs2_claim_suballoc_bits+0x1099/0x2560 [ 72.687288][ T5325] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 72.689694][ T5325] ? jbd2_journal_dirty_metadata+0x6dc/0xc00 [ 72.692153][ T5325] ? __pfx_lock_release+0x10/0x10 [ 72.694401][ T5325] ? __jbd2_journal_temp_unlink_buffer+0x40c/0x4f0 [ 72.697393][ T5325] __ocfs2_claim_clusters+0x332/0xa40 [ 72.699722][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 72.701572][ T5325] ? jbd2_journal_dirty_metadata+0x6dc/0xc00 [ 72.703717][ T5325] ? __pfx___ocfs2_claim_clusters+0x10/0x10 [ 72.705920][ T5325] ? ocfs2_sync_local_to_main+0x1e5/0xbc0 [ 72.708077][ T5325] ? __pfx_ocfs2_sync_local_to_main+0x10/0x10 [ 72.710484][ T5325] ? trace_kmalloc+0x1f/0xd0 [ 72.713136][ T5325] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 72.715567][ T5325] ? kmemdup_noprof+0x55/0x70 [ 72.717315][ T5325] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 72.719553][ T5325] ? ocfs2_claim_clusters+0x2e/0xb0 [ 72.721805][ T5325] ocfs2_reserve_local_alloc_bits+0x146b/0x28d0 [ 72.724835][ T5325] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10 [ 72.728062][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.730032][ T5325] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 72.732409][ T5325] ? __pfx_lock_release+0x10/0x10 [ 72.734402][ T5325] ? do_raw_spin_lock+0x14f/0x370 [ 72.736460][ T5325] ? do_raw_spin_unlock+0x58/0x8b0 [ 72.738558][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 72.740598][ T5325] ? ocfs2_alloc_should_use_local+0x155/0x320 [ 72.743394][ T5325] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60 [ 72.746484][ T5325] ? mark_lock+0x9a/0x360 [ 72.748414][ T5325] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10 [ 72.751225][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.753131][ T5325] ? ocfs2_num_free_extents+0x3b8/0x6d0 [ 72.755261][ T5325] ? __pfx_ocfs2_num_free_extents+0x10/0x10 [ 72.757858][ T5325] ocfs2_lock_allocators+0x30a/0x630 [ 72.760393][ T5325] ? __pfx_ocfs2_lock_allocators+0x10/0x10 [ 72.762788][ T5325] ? ocfs2_write_begin_nolock+0x1162/0x4e40 [ 72.764965][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.766751][ T5325] ? ocfs2_write_begin_nolock+0x1162/0x4e40 [ 72.769289][ T5325] ? __kmalloc_cache_noprof+0x243/0x390 [ 72.771643][ T5325] ocfs2_write_begin_nolock+0x28fe/0x4e40 [ 72.774054][ T5325] ? __pfx_ocfs2_write_begin_nolock+0x10/0x10 [ 72.776390][ T5325] ? mark_lock+0x2ae/0x360 [ 72.778282][ T5325] ? __lock_acquire+0x1397/0x2100 [ 72.780453][ T5325] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 72.783151][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.785168][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.787399][ T5325] ? __pfx___might_resched+0x10/0x10 [ 72.789404][ T5325] ? irqentry_exit+0x63/0x90 [ 72.791227][ T5325] ? irqentry_exit+0x63/0x90 [ 72.793238][ T5325] ? exc_page_fault+0x590/0x8b0 [ 72.795614][ T5325] ? down_write+0x18c/0x220 [ 72.797815][ T5325] ? __pfx_down_write+0x10/0x10 [ 72.800026][ T5325] ocfs2_write_begin+0x205/0x3a0 [ 72.801936][ T5325] ? __pfx_ocfs2_write_begin+0x10/0x10 [ 72.804041][ T5325] ? fault_in_iov_iter_readable+0x229/0x280 [ 72.806336][ T5325] generic_perform_write+0x346/0x990 [ 72.808743][ T5325] ? __pfx_generic_perform_write+0x10/0x10 [ 72.811063][ T5325] ? file_update_time+0x2ab/0x450 [ 72.813187][ T5325] ? __generic_file_write_iter+0x102/0x230 [ 72.815957][ T5325] ? ocfs2_file_write_iter+0x1989/0x2180 [ 72.818449][ T5325] ocfs2_file_write_iter+0x19af/0x2180 [ 72.820896][ T5325] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 72.823321][ T5325] ? __pfx_lock_acquire+0x10/0x10 [ 72.825254][ T5325] ? rcu_read_lock_any_held+0xb7/0x160 [ 72.827491][ T5325] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 72.829938][ T5325] vfs_write+0xacf/0xd10 [ 72.831579][ T5325] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 72.833851][ T5325] ? __pfx_vfs_write+0x10/0x10 [ 72.835844][ T5325] ? rcu_is_watching+0x15/0xb0 [ 72.837749][ T5325] ksys_write+0x18f/0x2b0 [ 72.839443][ T5325] ? __pfx_ksys_write+0x10/0x10 [ 72.841218][ T5325] ? do_syscall_64+0x100/0x230 [ 72.843309][ T5325] ? do_syscall_64+0xb6/0x230 [ 72.845762][ T5325] do_syscall_64+0xf3/0x230 [ 72.848099][ T5325] ? clear_bhb_loop+0x35/0x90 [ 72.850289][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.853215][ T5325] RIP: 0033:0x7f7981f8d169 [ 72.855185][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.863370][ T5325] RSP: 002b:00007f7982ea1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.866843][ T5325] RAX: ffffffffffffffda RBX: 00007f79821a5fa0 RCX: 00007f7981f8d169 [ 72.869954][ T5325] RDX: 000000000208e24b RSI: 0000400000000040 RDI: 0000000000000006 [ 72.873296][ T5325] RBP: 00007f798200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.876801][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.880416][ T5325] R13: 0000000000000000 R14: 00007f79821a5fa0 R15: 00007ffc89838868 [ 72.883609][ T5325] [ 72.885181][ T5325] Kernel Offset: disabled [ 72.886927][ T5325] Rebooting in 86400 seconds..