OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 (syz.0.0,5317,0):ocfs2_start_trans:357 ERROR: status = -30 OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. (syz.0.0,5317,0):ocfs2_write_begin_nolock:1758 ERROR: status = -30 (syz.0.0,5317,0):__ocfs2_page_mkwrite:97 ERROR: status = -30 ------------[ cut here ]------------ kernel BUG at fs/ocfs2/suballoc.c:804! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.14.0-rc4-syzkaller-00282-g1973160c90d7 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 88 63 62 fe e9 63 dd ff ff e8 6e c5 41 08 e8 69 27 fb fd 90 <0f> 0b e8 61 27 fb fd 48 c7 c7 60 03 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d2e63e0 EFLAGS: 00010293 RAX: ffffffff83c697b7 RBX: 00000000ffffffff RCX: ffff888000202440 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d2e68d0 R08: ffffffff83c65295 R09: 1ffffffff2079dee R10: dffffc0000000000 R11: fffffbfff2079def R12: 1ffff92001a5ccfc R13: ffff888034185c00 R14: ffff88803343fe00 R15: dffffc0000000000 FS: 000055556fbca500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00004000000027c0 CR3: 000000003d31e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ocfs2_reserve_cluster_bitmap_bits fs/ocfs2/suballoc.c:1132 [inline] ocfs2_reserve_clusters_with_limit+0x3dd/0xb60 fs/ocfs2/suballoc.c:1177 ocfs2_block_group_alloc fs/ocfs2/suballoc.c:674 [inline] ocfs2_reserve_suballoc_bits+0x9d6/0x4e70 fs/ocfs2/suballoc.c:832 ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0 fs/ocfs2/suballoc.c:982 ocfs2_reserve_new_metadata fs/ocfs2/suballoc.c:1025 [inline] ocfs2_lock_allocators+0x2a9/0x630 fs/ocfs2/suballoc.c:2735 ocfs2_write_begin_nolock+0x28fe/0x4e40 fs/ocfs2/aops.c:1725 __ocfs2_page_mkwrite fs/ocfs2/mmap.c:93 [inline] ocfs2_page_mkwrite+0x6d9/0xda0 fs/ocfs2/mmap.c:144 do_page_mkwrite+0x15c/0x350 mm/memory.c:3255 do_shared_fault mm/memory.c:5479 [inline] do_fault mm/memory.c:5541 [inline] do_pte_missing mm/memory.c:4058 [inline] handle_pte_fault mm/memory.c:5900 [inline] __handle_mm_fault+0x22e2/0x70f0 mm/memory.c:6043 handle_mm_fault+0x3e5/0x8d0 mm/memory.c:6212 do_user_addr_fault arch/x86/mm/fault.c:1388 [inline] handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x2b9/0x8b0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f2c44653be3 Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48 RSP: 002b:00007ffdd2fbede0 EFLAGS: 00010246 RAX: 00004000000027c0 RBX: 0000000000000008 RCX: 0000000000000000 RDX: 0000000000000078 RSI: 0000000000000000 RDI: 000055556fbca3c8 RBP: 00007ffdd2fbeee8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 00007f2c449a5fac R13: 00007f2c449a5fa0 R14: fffffffffffffffe R15: 00007ffdd2fbef30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ocfs2_reserve_suballoc_bits+0x4798/0x4e70 fs/ocfs2/suballoc.c:804 Code: e1 07 80 c1 03 38 c1 0f 8c 75 dd ff ff 48 8d bc 24 b0 01 00 00 e8 88 63 62 fe e9 63 dd ff ff e8 6e c5 41 08 e8 69 27 fb fd 90 <0f> 0b e8 61 27 fb fd 48 c7 c7 60 03 04 8f 48 8b 74 24 20 48 89 da RSP: 0000:ffffc9000d2e63e0 EFLAGS: 00010293 RAX: ffffffff83c697b7 RBX: 00000000ffffffff RCX: ffff888000202440 RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 RBP: ffffc9000d2e68d0 R08: ffffffff83c65295 R09: 1ffffffff2079dee R10: dffffc0000000000 R11: fffffbfff2079def R12: 1ffff92001a5ccfc R13: ffff888034185c00 R14: ffff88803343fe00 R15: dffffc0000000000 FS: 000055556fbca500(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00004000000027c0 CR3: 000000003d31e000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400