syzbot
kernel BUG in ocfs2_reserve_suballoc_bits (2)
Status:
upstream: reported C repro on 2025/09/08 12:17
Reported-by: syzbot+487e39304129321dd253@syzkaller.appspotmail.com
First crash: 323d, last: 97d
▶
▼
Bug presence (1)
| Date |
Name |
Commit |
Repro |
Result |
| 2026/07/10 |
upstream (ToT) |
a635d6748234 |
C
|
Failed due to an error; will retry later
|
Sample crash report:
(syz.0.17,4442,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
JBD2: Ignoring recovery information on journal
ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:800!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4442 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : ocfs2_reserve_suballoc_bits+0x3258/0x3c80 fs/ocfs2/suballoc.c:800
lr : ocfs2_reserve_suballoc_bits+0x3258/0x3c80 fs/ocfs2/suballoc.c:800
sp : ffff800021146c20
x29: ffff8000211470a0 x28: ffff800021146d60 x27: dfff800000000000
x26: ffff0000e9be0600 x25: 0000000000000003 x24: 0000000000000000
x23: ffff0000d1b3dd00 x22: 0000000000000000 x21: 0000000000000000
x20: 00000000ffffffff x19: ffff700004228dac x18: ffff800011b9bf60
x17: ffff80001835a000 x16: ffff8000082eef80 x15: ffff800017e3b000
x14: 0000000000000001 x13: 1ffff00004228ccc x12: 0000000000ff0100
x11: ff00800009de5e14 x10: 0000000000000000 x9 : ffff800009de5e14
x8 : ffff0000cdb60000 x7 : ffff800009d7729c x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011b0e224
x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000
Call trace:
ocfs2_reserve_suballoc_bits+0x3258/0x3c80 fs/ocfs2/suballoc.c:800
ocfs2_reserve_new_metadata_blocks+0x36c/0x830 fs/ocfs2/suballoc.c:978
ocfs2_mknod+0xca4/0x2110 fs/ocfs2/namei.c:347
ocfs2_create+0x19c/0x4f8 fs/ocfs2/namei.c:674
lookup_open fs/namei.c:3490 [inline]
open_last_lookups fs/namei.c:3558 [inline]
path_openat+0xe18/0x26bc fs/namei.c:3788
do_filp_open+0x194/0x384 fs/namei.c:3818
do_sys_openat2+0x134/0x3f4 fs/open.c:1320
do_sys_open fs/open.c:1336 [inline]
__do_sys_openat fs/open.c:1352 [inline]
__se_sys_openat fs/open.c:1347 [inline]
__arm64_sys_openat+0x118/0x14c fs/open.c:1347
__invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 54ff11eb 97ac05f4 17fff88d 979b15e2 (d4210000)
---[ end trace 0000000000000000 ]---
* Struck through repros no longer work on HEAD.