(syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5320,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5320,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5320,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 ------------[ cut here ]------------ kernel BUG at fs/ocfs2/suballoc.c:804! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 68 3d 62 fe e9 63 dd ff ff e8 5e 1a 42 08 e8 09 fd fa fd 90 <0f> 0b e8 01 fd fa fd 48 c7 c7 00 0a 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d2863e0 EFLAGS: 00010293 RAX: ffffffff83c6e2c7 RBX: 00000000ffffffff RCX: ffff888036762440 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d2868d0 R08: ffffffff83c69da5 R09: 1ffffffff2079f6e R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 1ffff92001a50cfc R13: ffff8880413f9d80 R14: ffff8880365c5e00 R15: dffffc0000000000 FS: 0000555583e30500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000002040 CR3: 0000000040306000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ocfs2_reserve_cluster_bitmap_bits fs/ocfs2/suballoc.c:1132 [inline] ocfs2_reserve_clusters_with_limit+0x3dd/0xb60 fs/ocfs2/suballoc.c:1177 ocfs2_block_group_alloc fs/ocfs2/suballoc.c:674 [inline] ocfs2_reserve_suballoc_bits+0x9d6/0x4e70 fs/ocfs2/suballoc.c:832 ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0 fs/ocfs2/suballoc.c:982 ocfs2_reserve_new_metadata fs/ocfs2/suballoc.c:1025 [inline] ocfs2_lock_allocators+0x2a9/0x630 fs/ocfs2/suballoc.c:2735 ocfs2_write_begin_nolock+0x28fe/0x4e40 fs/ocfs2/aops.c:1725 __ocfs2_page_mkwrite fs/ocfs2/mmap.c:93 [inline] ocfs2_page_mkwrite+0x6d9/0xda0 fs/ocfs2/mmap.c:144 do_page_mkwrite+0x15c/0x350 mm/memory.c:3256 do_shared_fault mm/memory.c:5485 [inline] do_fault mm/memory.c:5547 [inline] do_pte_missing mm/memory.c:4059 [inline] handle_pte_fault mm/memory.c:5888 [inline] __handle_mm_fault+0x2119/0x6ef0 mm/memory.c:6031 handle_mm_fault+0x3e5/0x8d0 mm/memory.c:6200 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2b9/0x8b0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f3f0ef56648 Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f RSP: 002b:00007ffe0ee8a058 EFLAGS: 00010246 RAX: 0000200000002040 RBX: 0000000000000004 RCX: 0030656c69662f2e RDX: 0000000000000008 RSI: 0030656c69662f2e RDI: 0000200000002040 RBP: 00007f3f0f1a7ba0 R08: 00007f3f0edff030 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000009 R12: 00007f3f0f1a5fac R13: 00007f3f0f1a5fa0 R14: fffffffffffffffe R15: 00007ffe0ee8a170 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 68 3d 62 fe e9 63 dd ff ff e8 5e 1a 42 08 e8 09 fd fa fd 90 <0f> 0b e8 01 fd fa fd 48 c7 c7 00 0a 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d2863e0 EFLAGS: 00010293 RAX: ffffffff83c6e2c7 RBX: 00000000ffffffff RCX: ffff888036762440 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d2868d0 R08: ffffffff83c69da5 R09: 1ffffffff2079f6e R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 1ffff92001a50cfc R13: ffff8880413f9d80 R14: ffff8880365c5e00 R15: dffffc0000000000 FS: 0000555583e30500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000002040 CR3: 0000000040306000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400