loop0: detected capacity change from 0 to 32768 JBD2: Ignoring recovery information on journal ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. (syz.0.0,5322,0):ocfs2_mknod:506 ERROR: status = -31 (syz.0.0,5322,0):ocfs2_mkdir:662 ERROR: status = -31 ------------[ cut here ]------------ kernel BUG at fs/ocfs2/aops.c:1161! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:ocfs2_write_cluster fs/ocfs2/aops.c:1161 [inline] RIP: 0010:ocfs2_write_cluster_by_desc+0x1da7/0x1dd0 fs/ocfs2/aops.c:1221 Code: 48 c7 c6 fb b5 02 8e ba 6c 04 00 00 48 c7 c1 a0 0b 13 8c e8 8b cc 1c 00 48 8b 44 24 10 c6 40 1e f8 90 0f 0b e8 ea 78 01 fe 90 <0f> 0b e8 e2 78 01 fe 90 0f 0b e8 da 78 01 fe 90 0f 0b e8 d2 78 01 RSP: 0018:ffffc90005f4dd60 EFLAGS: 00010246 RAX: ffffffff83c4cc16 RBX: ffff888043bc2488 RCX: 0000000000100000 RDX: ffffc90020802000 RSI: 00000000000fffff RDI: 0000000000100000 RBP: ffffc90005f4e0b0 R08: ffff888043bc2313 R09: 1ffff11008778462 R10: dffffc0000000000 R11: ffffed1008778463 R12: 0000000000000000 R13: dffffc0000000000 R14: ffff88803693c014 R15: 0000000000000000 FS: 00007f07bb7f56c0(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbae1609f58 CR3: 000000001339b000 CR4: 0000000000352ef0 Call Trace: ocfs2_write_begin_nolock+0x3346/0x41f0 fs/ocfs2/aops.c:1797 ocfs2_write_begin+0x1ba/0x310 fs/ocfs2/aops.c:1885 generic_perform_write+0x2d5/0x8f0 mm/filemap.c:4363 ocfs2_file_write_iter+0x1706/0x1f10 fs/ocfs2/file.c:2476 __kernel_write_iter+0x44a/0x8f0 fs/read_write.c:621 dump_emit_page fs/coredump.c:1298 [inline] dump_user_range+0xc19/0x12c0 fs/coredump.c:1372 elf_core_dump+0x3485/0x3a90 fs/binfmt_elf.c:2109 coredump_write+0x1290/0x1960 fs/coredump.c:1052 do_coredump fs/coredump.c:1131 [inline] vfs_coredump+0x36ff/0x44b0 fs/coredump.c:1200 get_signal+0x1094/0x12c0 kernel/signal.c:3023 arch_do_signal_or_restart+0xbb/0x860 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:66 [inline] exit_to_user_mode_loop kernel/entry/common.c:101 [inline] __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] irqentry_exit_to_user_mode_prepare include/linux/irq-entry-common.h:244 [inline] irqentry_exit_to_user_mode include/linux/irq-entry-common.h:315 [inline] irqentry_exit+0x2ba/0x8f0 kernel/entry/common.c:165 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:595 RIP: 0033:0x7f07bf37bd98 Code: 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 89 f8 62 a1 fd 00 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 28 01 00 00 <62> f1 7d 20 74 07 c5 fb 93 c0 85 c0 74 1a 0f bc c0 c3 66 0f 1f 44 RSP: 002b:00007f07bb7f4e18 EFLAGS: 00010283 RAX: 0000000000000000 RBX: 00007f07bb7f4ea0 RCX: 0000000000000000 RDX: 00000000000001ff RSI: 0000200000000040 RDI: 0000000000000000 RBP: 00002000000002c0 R08: 0000200000000200 R09: 0000000000000000 R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040 R13: 00007f07bb7f4e60 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ocfs2_write_cluster fs/ocfs2/aops.c:1161 [inline] RIP: 0010:ocfs2_write_cluster_by_desc+0x1da7/0x1dd0 fs/ocfs2/aops.c:1221 Code: 48 c7 c6 fb b5 02 8e ba 6c 04 00 00 48 c7 c1 a0 0b 13 8c e8 8b cc 1c 00 48 8b 44 24 10 c6 40 1e f8 90 0f 0b e8 ea 78 01 fe 90 <0f> 0b e8 e2 78 01 fe 90 0f 0b e8 da 78 01 fe 90 0f 0b e8 d2 78 01 RSP: 0018:ffffc90005f4dd60 EFLAGS: 00010246 RAX: ffffffff83c4cc16 RBX: ffff888043bc2488 RCX: 0000000000100000 RDX: ffffc90020802000 RSI: 00000000000fffff RDI: 0000000000100000 RBP: ffffc90005f4e0b0 R08: ffff888043bc2313 R09: 1ffff11008778462 R10: dffffc0000000000 R11: ffffed1008778463 R12: 0000000000000000 R13: dffffc0000000000 R14: ffff88803693c014 R15: 0000000000000000 FS: 00007f07bb7f56c0(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbae1609f58 CR3: 000000001339b000 CR4: 0000000000352ef0