Aborting journal on device loop0-75. Buffer I/O error on dev loop0, logical block 640, lost sync page write JBD2: I/O error when updating journal superblock for loop0-75. (syz.0.0,5323,0):__ocfs2_journal_access:705 ERROR: Error -5 getting 1 access to buffer! (syz.0.0,5323,0):ocfs2_write_end_nolock:1942 ERROR: status = -5 (syz.0.0,5323,0):ocfs2_commit_trans:382 ERROR: status = -5 ------------[ cut here ]------------ kernel BUG at fs/ocfs2/mmap.c:107! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__ocfs2_page_mkwrite fs/ocfs2/mmap.c:107 [inline] RIP: 0010:ocfs2_page_mkwrite+0xda1/0xdb0 fs/ocfs2/mmap.c:144 Code: ff df 4d 89 fc e9 85 f3 ff ff 48 ff cb e8 87 30 f9 fd 49 89 dc 49 be 00 00 00 00 00 fc ff df e9 6b f3 ff ff e8 70 30 f9 fd 90 <0f> 0b cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 RSP: 0018:ffffc9000d5af720 EFLAGS: 00010293 RAX: ffffffff83c98cb0 RBX: 00000000fffffffb RCX: ffff888000d74880 RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000fffffffb RBP: ffffc9000d5af8e0 R08: ffffffff83c98aa2 R09: 1ffffffff20bfcae R10: dffffc0000000000 R11: fffffbfff20bfcaf R12: 0000000000001000 R13: 000000000000c000 R14: ffffea000151d940 R15: 0000000000000000 FS: 0000555590253500(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000000c000 CR3: 0000000040ff0000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_page_mkwrite+0x159/0x340 mm/memory.c:3287 do_shared_fault mm/memory.c:5594 [inline] do_fault mm/memory.c:5656 [inline] do_pte_missing mm/memory.c:4160 [inline] handle_pte_fault+0x10c6/0x61c0 mm/memory.c:5997 __handle_mm_fault mm/memory.c:6140 [inline] handle_mm_fault+0x1129/0x1bf0 mm/memory.c:6309 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2bb/0x920 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f0b0115790c Code: 00 00 00 74 a0 83 f9 c0 0f 87 56 fe ff ff 62 e1 fe 28 6f 4e 01 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 62 c1 fe 28 7f 00 62 c1 fe 28 7f 48 01 c3 0f 1f 40 00 4c 8b RSP: 002b:00007ffda48f2918 EFLAGS: 00010206 RAX: 000020000000a2c0 RBX: 0000000000000004 RCX: 00000000000033b3 RDX: 00000000000050f3 RSI: 00007f0b00c0b631 RDI: 000020000000c000 RBP: 00007ffda48f29e8 R08: 000020000000a2c0 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000002 R12: 00007f0b013b5fac R13: 00007f0b013b5fa0 R14: fffffffffffffffe R15: 00007ffda48f2a30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__ocfs2_page_mkwrite fs/ocfs2/mmap.c:107 [inline] RIP: 0010:ocfs2_page_mkwrite+0xda1/0xdb0 fs/ocfs2/mmap.c:144 Code: ff df 4d 89 fc e9 85 f3 ff ff 48 ff cb e8 87 30 f9 fd 49 89 dc 49 be 00 00 00 00 00 fc ff df e9 6b f3 ff ff e8 70 30 f9 fd 90 <0f> 0b cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 RSP: 0018:ffffc9000d5af720 EFLAGS: 00010293 RAX: ffffffff83c98cb0 RBX: 00000000fffffffb RCX: ffff888000d74880 RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00000000fffffffb RBP: ffffc9000d5af8e0 R08: ffffffff83c98aa2 R09: 1ffffffff20bfcae R10: dffffc0000000000 R11: fffffbfff20bfcaf R12: 0000000000001000 R13: 000000000000c000 R14: ffffea000151d940 R15: 0000000000000000 FS: 0000555590253500(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000020000000c000 CR3: 0000000040ff0000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400