------------[ cut here ]------------ kernel BUG at fs/ocfs2/suballoc.c:804! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 68 3d 62 fe e9 63 dd ff ff e8 5e 1a 42 08 e8 09 fd fa fd 90 <0f> 0b e8 01 fd fa fd 48 c7 c7 00 0a 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d736400 EFLAGS: 00010293 RAX: ffffffff83c6e2c7 RBX: 00000000ffffffff RCX: ffff888000394880 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d7368f0 R08: ffffffff83c69da5 R09: 1ffffffff2079f6e R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 1ffff92001ae6d00 R13: ffff888012145380 R14: ffff888043c54e00 R15: dffffc0000000000 FS: 000055556f6f0500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000080 CR3: 0000000043324000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ocfs2_reserve_cluster_bitmap_bits+0xc5/0x1d0 fs/ocfs2/suballoc.c:1132 ocfs2_local_alloc_reserve_for_window fs/ocfs2/localalloc.c:1108 [inline] ocfs2_local_alloc_slide_window fs/ocfs2/localalloc.c:1244 [inline] ocfs2_reserve_local_alloc_bits+0x965/0x28d0 fs/ocfs2/localalloc.c:669 ocfs2_reserve_clusters_with_limit+0x1b8/0xb60 fs/ocfs2/suballoc.c:1166 ocfs2_convert_inline_data_to_extents+0x29d/0x1800 fs/ocfs2/alloc.c:7089 ocfs2_try_to_write_inline_data fs/ocfs2/aops.c:1548 [inline] ocfs2_write_begin_nolock+0x1c82/0x4e40 fs/ocfs2/aops.c:1655 __ocfs2_page_mkwrite fs/ocfs2/mmap.c:93 [inline] ocfs2_page_mkwrite+0x6d9/0xda0 fs/ocfs2/mmap.c:144 do_page_mkwrite+0x15c/0x350 mm/memory.c:3256 do_shared_fault mm/memory.c:5485 [inline] do_fault mm/memory.c:5547 [inline] do_pte_missing mm/memory.c:4059 [inline] handle_pte_fault mm/memory.c:5888 [inline] __handle_mm_fault+0x2119/0x6ef0 mm/memory.c:6031 handle_mm_fault+0x3e5/0x8d0 mm/memory.c:6200 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2b9/0x8b0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f9255556648 Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f RSP: 002b:00007fff26b2a518 EFLAGS: 00010202 RAX: 0000200000000080 RBX: 0000000000000004 RCX: 006b746e69727079 RDX: 000000000000000f RSI: 7974742f7665642f RDI: 0000200000000080 RBP: 00007f92557a7ba0 R08: 00007f92553ff030 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000009 R12: 00007f92557a5fac R13: 00007f92557a5fa0 R14: fffffffffffffffe R15: 00007fff26b2a630 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 68 3d 62 fe e9 63 dd ff ff e8 5e 1a 42 08 e8 09 fd fa fd 90 <0f> 0b e8 01 fd fa fd 48 c7 c7 00 0a 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d736400 EFLAGS: 00010293 RAX: ffffffff83c6e2c7 RBX: 00000000ffffffff RCX: ffff888000394880 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d7368f0 R08: ffffffff83c69da5 R09: 1ffffffff2079f6e R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 1ffff92001ae6d00 R13: ffff888012145380 R14: ffff888043c54e00 R15: dffffc0000000000 FS: 000055556f6f0500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000080 CR3: 0000000043324000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400