./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor309018614 <...> Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. execve("./syz-executor309018614", ["./syz-executor309018614"], 0x7ffe81aec0b0 /* 10 vars */) = 0 brk(NULL) = 0x55555d2e3000 brk(0x55555d2e3d00) = 0x55555d2e3d00 arch_prctl(ARCH_SET_FS, 0x55555d2e3380) = 0 set_tid_address(0x55555d2e3650) = 5820 set_robust_list(0x55555d2e3660, 24) = 0 rseq(0x55555d2e3ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor309018614", 4096) = 27 getrandom("\x3a\xf7\xf5\x0f\x4a\x08\x3c\x42", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555d2e3d00 brk(0x55555d304d00) = 0x55555d304d00 brk(0x55555d305000) = 0x55555d305000 mprotect(0x7fa274f15000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa26ca00000 write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216 munmap(0x7fa26ca00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 syzkaller login: [ 71.603793][ T5820] loop0: detected capacity change from 0 to 32768 [ 71.642367][ T5820] ------------[ cut here ]------------ [ 71.647949][ T5820] kernel BUG at fs/ocfs2/inode.c:350! [ 71.653589][ T5820] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 71.659870][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor309 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(full) [ 71.672279][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 71.682321][ T5820] RIP: 0010:ocfs2_populate_inode+0x175e/0x1780 [ 71.689004][ T5820] Code: c6 bf 02 00 00 00 e8 51 72 28 fe 45 84 f6 75 2a e8 47 6f 28 fe 48 8b 5c 24 10 4c 8b 64 24 18 e9 d6 f1 ff ff e8 33 6f 28 fe 90 <0f> 0b e8 2b 6f 28 fe 90 0f 0b 90 e9 f7 fe ff ff e8 1d 6f 28 fe e8 [ 71.708587][ T5820] RSP: 0018:ffffc9000412ed60 EFLAGS: 00010293 [ 71.714637][ T5820] RAX: ffffffff8397602d RBX: ffff888076c596b8 RCX: ffff8880345c1e00 [ 71.722586][ T5820] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 71.730531][ T5820] RBP: ffffc9000412ee90 R08: ffffffff8f7daf77 R09: 1ffffffff1efb5ee [ 71.738476][ T5820] R10: dffffc0000000000 R11: fffffbfff1efb5ef R12: ffff88807452642c [ 71.746423][ T5820] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000000 [ 71.754376][ T5820] FS: 000055555d2e3380(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 71.763283][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.769839][ T5820] CR2: 000000000400c388 CR3: 000000002ce4a000 CR4: 00000000003526f0 [ 71.777790][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.785738][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.793685][ T5820] Call Trace: [ 71.796941][ T5820] [ 71.799851][ T5820] ? __pfx_ocfs2_populate_inode+0x10/0x10 [ 71.805562][ T5820] ? __pfx_ocfs2_find_actor+0x10/0x10 [ 71.810913][ T5820] ? __pfx_ocfs2_init_locked_inode+0x10/0x10 [ 71.816871][ T5820] ? __pfx_ocfs2_find_actor+0x10/0x10 [ 71.822224][ T5820] ocfs2_iget+0xdc1/0x1a90 [ 71.826619][ T5820] ? stack_depot_save_flags+0x42b/0x910 [ 71.832230][ T5820] ? __pfx_ocfs2_iget+0x10/0x10 [ 71.837063][ T5820] ? kasan_save_track+0x4f/0x80 [ 71.841887][ T5820] ? kasan_save_track+0x3e/0x80 [ 71.846714][ T5820] ? __kasan_kmalloc+0x93/0xb0 [ 71.851453][ T5820] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 71.856982][ T5820] ? ocfs2_new_dlm_debug+0x96/0x1e0 [ 71.862160][ T5820] ? ocfs2_fill_super+0x2a64/0x63d0 [ 71.867337][ T5820] ? get_tree_bdev_flags+0x40b/0x4d0 [ 71.872604][ T5820] ? vfs_get_tree+0x8f/0x2b0 [ 71.877210][ T5820] ? do_new_mount+0x24a/0xa40 [ 71.881883][ T5820] ? do_syscall_64+0xf6/0x210 [ 71.886563][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.892625][ T5820] ocfs2_init_global_system_inodes+0x16c/0x660 [ 71.898761][ T5820] ? __kasan_kmalloc+0x93/0xb0 [ 71.903505][ T5820] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 71.910158][ T5820] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 71.915682][ T5820] ? ocfs2_new_dlm_debug+0x96/0x1e0 [ 71.920855][ T5820] ? ocfs2_new_dlm_debug+0xb4/0x1e0 [ 71.926027][ T5820] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 71.931635][ T5820] ? rcu_is_watching+0x15/0xb0 [ 71.936380][ T5820] ? trace_ocfs2_initialize_super+0x8b/0x1f0 [ 71.942350][ T5820] ocfs2_fill_super+0x2aec/0x63d0 [ 71.947358][ T5820] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 71.952705][ T5820] ? unwind_next_frame+0xa5/0x2390 [ 71.957789][ T5820] ? rcu_is_watching+0x15/0xb0 [ 71.962531][ T5820] ? __kasan_check_byte+0x12/0x40 [ 71.967533][ T5820] ? is_bpf_text_address+0x26/0x2b0 [ 71.972710][ T5820] ? rcu_is_watching+0x15/0xb0 [ 71.977448][ T5820] ? __kasan_check_byte+0x12/0x40 [ 71.982455][ T5820] ? rcu_is_watching+0x15/0xb0 [ 71.987197][ T5820] ? lock_release+0x4b/0x3e0 [ 71.991762][ T5820] ? lock_release+0x4b/0x3e0 [ 71.996330][ T5820] ? unwind_next_frame+0xa5/0x2390 [ 72.001420][ T5820] ? rcu_is_watching+0x15/0xb0 [ 72.006164][ T5820] ? __kasan_check_byte+0x12/0x40 [ 72.011168][ T5820] ? unwind_next_frame+0xa5/0x2390 [ 72.016255][ T5820] ? unwind_next_frame+0xa5/0x2390 [ 72.021341][ T5820] ? rcu_is_watching+0x15/0xb0 [ 72.026110][ T5820] ? __kasan_check_byte+0x12/0x40 [ 72.031123][ T5820] ? is_bpf_text_address+0x26/0x2b0 [ 72.036306][ T5820] ? rcu_is_watching+0x15/0xb0 [ 72.041065][ T5820] ? __kasan_check_byte+0x12/0x40 [ 72.046083][ T5820] ? rcu_is_watching+0x15/0xb0 [ 72.050834][ T5820] ? lock_release+0x4b/0x3e0 [ 72.055410][ T5820] ? lock_release+0x4b/0x3e0 [ 72.059997][ T5820] ? is_bpf_text_address+0x292/0x2b0 [ 72.065266][ T5820] ? is_bpf_text_address+0x26/0x2b0 [ 72.070444][ T5820] ? kernel_text_address+0xa5/0xe0 [ 72.075545][ T5820] ? __kernel_text_address+0xd/0x40 [ 72.080734][ T5820] ? unwind_get_return_address+0x4d/0x90 [ 72.086347][ T5820] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 72.092480][ T5820] ? arch_stack_walk+0xfc/0x150 [ 72.097346][ T5820] ? __bfs+0x151/0x2a0 [ 72.101405][ T5820] ? __pfx_hlock_conflict+0x10/0x10 [ 72.106593][ T5820] ? __bfs+0x151/0x2a0 [ 72.110644][ T5820] ? __pfx_hlock_conflict+0x10/0x10 [ 72.115824][ T5820] ? check_path+0x21/0x40 [ 72.120139][ T5820] ? check_noncircular+0xe0/0x160 [ 72.125156][ T5820] ? lockdep_unlock+0x89/0x120 [ 72.129901][ T5820] ? validate_chain+0x897/0x2140 [ 72.134913][ T5820] ? __lock_acquire+0xaac/0xd20 [ 72.139743][ T5820] ? __mutex_trylock_common+0x153/0x260 [ 72.145263][ T5820] ? string+0x279/0x2b0 [ 72.149399][ T5820] ? widen_string+0x3b/0x2a0 [ 72.153960][ T5820] ? string+0x279/0x2b0 [ 72.158094][ T5820] ? bdev_name+0x2ce/0x430 [ 72.162484][ T5820] ? rcu_is_watching+0x15/0xb0 [ 72.167228][ T5820] ? pointer+0x5f2/0x1190 [ 72.171534][ T5820] ? __pfx_pointer+0x10/0x10 [ 72.176104][ T5820] ? bdev_open+0x91d/0xd30 [ 72.180496][ T5820] ? format_decode+0x5ee/0xe30 [ 72.185243][ T5820] ? snprintf+0xda/0x120 [ 72.189466][ T5820] ? __pfx_snprintf+0x10/0x10 [ 72.194120][ T5820] ? set_blocksize+0x21e/0x500 [ 72.198866][ T5820] ? sb_set_blocksize+0x104/0x180 [ 72.203869][ T5820] ? setup_bdev_super+0x4c1/0x5b0 [ 72.208872][ T5820] get_tree_bdev_flags+0x40b/0x4d0 [ 72.213963][ T5820] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 72.219316][ T5820] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 72.224927][ T5820] ? cap_capable+0x11f/0x460 [ 72.229492][ T5820] ? ocfs2_init_fs_context+0x65/0x260 [ 72.234846][ T5820] ? safesetid_security_capable+0xa9/0x1a0 [ 72.240627][ T5820] vfs_get_tree+0x8f/0x2b0 [ 72.245056][ T5820] do_new_mount+0x24a/0xa40 [ 72.249563][ T5820] __se_sys_mount+0x317/0x410 [ 72.254222][ T5820] ? __pfx___se_sys_mount+0x10/0x10 [ 72.259400][ T5820] ? __x64_sys_mount+0x20/0xc0 [ 72.264145][ T5820] do_syscall_64+0xf6/0x210 [ 72.268627][ T5820] ? clear_bhb_loop+0x45/0xa0 [ 72.273282][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.279146][ T5820] RIP: 0033:0x7fa274e9f97a [ 72.283553][ T5820] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.303135][ T5820] RSP: 002b:00007ffcb71f5be8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 72.311526][ T5820] RAX: ffffffffffffffda RBX: 00007ffcb71f5c00 RCX: 00007fa274e9f97a [ 72.319476][ T5820] RDX: 0000200000004440 RSI: 0000200000000140 RDI: 00007ffcb71f5c00 [ 72.327429][ T5820] RBP: 0000200000000140 R08: 00007ffcb71f5c40 R09: 000000000000444d [ 72.335382][ T5820] R10: 0000000000000000 R11: 0000000000000282 R12: 0000200000004440 [ 72.343336][ T5820] R13: 00007ffcb71f5c40 R14: 0000000000000003 R15: 0000000000000000 [ 72.351287][ T5820] [ 72.354298][ T5820] Modules linked in: [ 72.358335][ T5820] ---[ end trace 0000000000000000 ]--- [ 72.363848][ T5820] RIP: 0010:ocfs2_populate_inode+0x175e/0x1780 [ 72.370024][ T5820] Code: c6 bf 02 00 00 00 e8 51 72 28 fe 45 84 f6 75 2a e8 47 6f 28 fe 48 8b 5c 24 10 4c 8b 64 24 18 e9 d6 f1 ff ff e8 33 6f 28 fe 90 <0f> 0b e8 2b 6f 28 fe 90 0f 0b 90 e9 f7 fe ff ff e8 1d 6f 28 fe e8 [ 72.389664][ T5820] RSP: 0018:ffffc9000412ed60 EFLAGS: 00010293 [ 72.396551][ T5820] RAX: ffffffff8397602d RBX: ffff888076c596b8 RCX: ffff8880345c1e00 [ 72.404539][ T5820] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 72.412528][ T5820] RBP: ffffc9000412ee90 R08: ffffffff8f7daf77 R09: 1ffffffff1efb5ee [ 72.420493][ T5820] R10: dffffc0000000000 R11: fffffbfff1efb5ef R12: ffff88807452642c [ 72.428499][ T5820] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000000 [ 72.436489][ T5820] FS: 000055555d2e3380(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 72.445427][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.452171][ T5820] CR2: 000000000400c388 CR3: 000000002ce4a000 CR4: 00000000003526f0 [ 72.460129][ T5820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.468122][ T5820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.476120][ T5820] Kernel panic - not syncing: Fatal exception [ 72.482412][ T5820] Kernel Offset: disabled [ 72.486718][ T5820] Rebooting in 86400 seconds..