BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 800000010a03c067 P4D 800000010a03c067 PUD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 2836 Comm: syz-executor Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 RIP: 0010:ocfs2_clear_inode+0x1d2/0x760 fs/ocfs2/inode.c:1208 Code: 88 f7 ff ff 00 00 00 00 48 8b 44 24 38 65 48 2b 04 25 28 00 00 00 0f 85 31 05 00 00 48 8b 85 90 02 00 00 48 8d b3 90 04 00 00 <48> 8b 78 08 48 83 c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 b7 c8 e2 RSP: 0018:ffffc900025ebd70 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888109ab2478 RCX: ffffc900025ebd24 RDX: ffff88810a13d040 RSI: ffff888109ab2908 RDI: ffffffff833386ff RBP: ffff88810c5aa000 R08: 0000000000008656 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff82d135f0 R12: ffff888109ab21f0 R13: ffff888109ab1e00 R14: ffff888109ab1c08 R15: ffff88810c5aa000 FS: 0000555555ee8500(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 0000000106912000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: evict+0xca/0x1d0 fs/inode.c:588 ocfs2_release_system_inodes+0x1c/0xc0 fs/ocfs2/super.c:516 ocfs2_dismount_volume+0x201/0x2f0 fs/ocfs2/super.c:1917 generic_shutdown_super+0x6f/0x100 fs/super.c:465 kill_block_super+0x1c/0x40 fs/super.c:1395 deactivate_locked_super+0x2c/0xa0 fs/super.c:335 cleanup_mnt+0x10b/0x150 fs/namespace.c:1137 task_work_run+0x57/0x90 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop kernel/entry/common.c:175 [inline] exit_to_user_mode_prepare+0x16e/0x170 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x13/0x30 kernel/entry/common.c:300 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f861329ca47 Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 RSP: 002b:00007ffeaed44d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f861330e1cc RCX: 00007f861329ca47 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaed44dd0 RBP: 00007ffeaed44dd0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeaed45e50 R13: 00007f861330e1cc R14: 000000000000f12a R15: 00007ffeaed45e90 Modules linked in: CR2: 0000000000000008 ---[ end trace 936bade550cc3067 ]--- RIP: 0010:ocfs2_clear_inode+0x1d2/0x760 fs/ocfs2/inode.c:1208 Code: 88 f7 ff ff 00 00 00 00 48 8b 44 24 38 65 48 2b 04 25 28 00 00 00 0f 85 31 05 00 00 48 8b 85 90 02 00 00 48 8d b3 90 04 00 00 <48> 8b 78 08 48 83 c4 40 5b 5d 41 5c 41 5d 41 5e 41 5f e9 b7 c8 e2 RSP: 0018:ffffc900025ebd70 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888109ab2478 RCX: ffffc900025ebd24 RDX: ffff88810a13d040 RSI: ffff888109ab2908 RDI: ffffffff833386ff RBP: ffff88810c5aa000 R08: 0000000000008656 R09: 0000000000000001 R10: 0000000000000000 R11: ffffffff82d135f0 R12: ffff888109ab21f0 R13: ffff888109ab1e00 R14: ffff888109ab1c08 R15: ffff88810c5aa000 FS: 0000555555ee8500(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 0000000106912000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: f7 ff idiv %edi 2: ff 00 incl (%rax) 4: 00 00 add %al,(%rax) 6: 00 48 8b add %cl,-0x75(%rax) 9: 44 24 38 rex.R and $0x38,%al c: 65 48 2b 04 25 28 00 sub %gs:0x28,%rax 13: 00 00 15: 0f 85 31 05 00 00 jne 0x54c 1b: 48 8b 85 90 02 00 00 mov 0x290(%rbp),%rax 22: 48 8d b3 90 04 00 00 lea 0x490(%rbx),%rsi * 29: 48 8b 78 08 mov 0x8(%rax),%rdi <-- trapping instruction 2d: 48 83 c4 40 add $0x40,%rsp 31: 5b pop %rbx 32: 5d pop %rbp 33: 41 5c pop %r12 35: 41 5d pop %r13 37: 41 5e pop %r14 39: 41 5f pop %r15 3b: e9 .byte 0xe9 3c: b7 c8 mov $0xc8,%bh 3e: e2 .byte 0xe2