ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped.
ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode.
(syz.3.415,6215,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 PID: 6215 Comm: syz.3.415 Not tainted 6.1.130-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
assign_lock_key+0x230/0x260 kernel/locking/lockdep.c:974
register_lock_class+0x28a/0x990 kernel/locking/lockdep.c:1287
__lock_acquire+0xd3/0x1f80 kernel/locking/lockdep.c:4928
lock_acquire+0x1f8/0x5a0 kernel/locking/lockdep.c:5662
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162
ocfs2_mark_lockres_freeing+0x15a/0x690 fs/ocfs2/dlmglue.c:3515
ocfs2_simple_drop_lockres fs/ocfs2/dlmglue.c:3571 [inline]
ocfs2_drop_osb_locks fs/ocfs2/dlmglue.c:3579 [inline]
ocfs2_dlm_shutdown+0x36/0x230 fs/ocfs2/dlmglue.c:3389
ocfs2_dismount_volume+0x490/0x960 fs/ocfs2/super.c:1920
generic_shutdown_super+0x130/0x340 fs/super.c:501
kill_block_super+0x7a/0xe0 fs/super.c:1470
deactivate_locked_super+0xa0/0x110 fs/super.c:332
cleanup_mnt+0x490/0x520 fs/namespace.c:1186
task_work_run+0x246/0x300 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:177
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7feb94b8e90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb95ab7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffec RBX: 00007feb95ab7ef0 RCX: 00007feb94b8e90a
RDX: 0000400000000040 RSI: 00004000000044c0 RDI: 00007feb95ab7eb0
RBP: 0000400000000040 R08: 00007feb95ab7ef0 R09: 0000000000800401
R10: 0000000000800401 R11: 0000000000000246 R12: 00004000000044c0
R13: 00007feb95ab7eb0 R14: 0000000000004472 R15: 00004000000006c0
ocfs2: Unmounting device (7,3) on (node local)
general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 1 PID: 6215 Comm: syz.3.415 Not tainted 6.1.130-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
RIP: 0010:ocfs2_clear_inode fs/ocfs2/inode.c:1208 [inline]
RIP: 0010:ocfs2_evict_inode+0x32e1/0x4c30 fs/ocfs2/inode.c:1220
Code: 24 98 00 00 00 74 08 4c 89 f7 e8 9a 16 76 fe 48 b9 00 00 00 00 00 fc ff df 48 01 cb 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <80> 3c 08 00 74 08 4c 89 f7 e8 71 16 76 fe 49 8b 3e 48 8b 34 24 48
RSP: 0018:ffffc9000332f300 EFLAGS: 00010202
RAX: 0000000000000001 RBX: fffff52000665e74 RCX: dffffc0000000000
RDX: ffffc9000e551000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc9000332fa50 R08: ffffffff836be4ce R09: ffffed100ac5b617
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880562db220
R13: 1ffff1100ac5b644 R14: 0000000000000008 R15: ffff8880562daac0
FS: 00007feb95ab86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c354e6d CR3: 0000000067a55000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000004807 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
evict+0x529/0x930 fs/inode.c:705
__ocfs2_free_slot_info fs/ocfs2/slot_map.c:307 [inline]
ocfs2_free_slot_info+0x90/0x260 fs/ocfs2/slot_map.c:443
ocfs2_delete_osb+0x58/0x180 fs/ocfs2/super.c:2504
ocfs2_dismount_volume+0x59d/0x960 fs/ocfs2/super.c:1938
generic_shutdown_super+0x130/0x340 fs/super.c:501
kill_block_super+0x7a/0xe0 fs/super.c:1470
deactivate_locked_super+0xa0/0x110 fs/super.c:332
cleanup_mnt+0x490/0x520 fs/namespace.c:1186
task_work_run+0x246/0x300 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
exit_to_user_mode_loop+0xde/0x100 kernel/entry/common.c:177
exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
__syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7feb94b8e90a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007feb95ab7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffec RBX: 00007feb95ab7ef0 RCX: 00007feb94b8e90a
RDX: 0000400000000040 RSI: 00004000000044c0 RDI: 00007feb95ab7eb0
RBP: 0000400000000040 R08: 00007feb95ab7ef0 R09: 0000000000800401
R10: 0000000000800401 R11: 0000000000000246 R12: 00004000000044c0
R13: 00007feb95ab7eb0 R14: 0000000000004472 R15: 00004000000006c0
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_clear_inode fs/ocfs2/inode.c:1208 [inline]
RIP: 0010:ocfs2_evict_inode+0x32e1/0x4c30 fs/ocfs2/inode.c:1220
Code: 24 98 00 00 00 74 08 4c 89 f7 e8 9a 16 76 fe 48 b9 00 00 00 00 00 fc ff df 48 01 cb 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <80> 3c 08 00 74 08 4c 89 f7 e8 71 16 76 fe 49 8b 3e 48 8b 34 24 48
RSP: 0018:ffffc9000332f300 EFLAGS: 00010202
RAX: 0000000000000001 RBX: fffff52000665e74 RCX: dffffc0000000000
RDX: ffffc9000e551000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc9000332fa50 R08: ffffffff836be4ce R09: ffffed100ac5b617
R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880562db220
R13: 1ffff1100ac5b644 R14: 0000000000000008 R15: ffff8880562daac0
FS: 00007feb95ab86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4fc4ed56c0 CR3: 0000000067a55000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 24 98 and $0x98,%al
2: 00 00 add %al,(%rax)
4: 00 74 08 4c add %dh,0x4c(%rax,%rcx,1)
8: 89 f7 mov %esi,%edi
a: e8 9a 16 76 fe call 0xfe7616a9
f: 48 b9 00 00 00 00 00 movabs $0xdffffc0000000000,%rcx
16: fc ff df
19: 48 01 cb add %rcx,%rbx
1c: 4d 8b 36 mov (%r14),%r14
1f: 49 83 c6 08 add $0x8,%r14
23: 4c 89 f0 mov %r14,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 80 3c 08 00 cmpb $0x0,(%rax,%rcx,1) <-- trapping instruction
2e: 74 08 je 0x38
30: 4c 89 f7 mov %r14,%rdi
33: e8 71 16 76 fe call 0xfe7616a9
38: 49 8b 3e mov (%r14),%rdi
3b: 48 8b 34 24 mov (%rsp),%rsi
3f: 48 rex.W