------------[ cut here ]------------ kernel BUG at fs/ocfs2/alloc.c:5573! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 5198 Comm: syz.1.20 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 RIP: 0010:ocfs2_remove_extent+0x1eb4/0x2010 fs/ocfs2/alloc.c:5573 Code: 7f fa ff ff 48 8b 4c 24 08 80 e1 07 fe c1 38 c1 0f 8c c0 fa ff ff 48 8b 7c 24 08 e8 56 03 a7 fe e9 b1 fa ff ff e8 9c e4 61 fe <0f> 0b 65 44 8b 3d da c3 ea 7c bf 07 00 00 00 44 89 fe e8 e5 e7 61 RSP: 0018:ffffc900030de620 EFLAGS: 00010293 RAX: ffffffff83175174 RBX: ffff88805a4514d0 RCX: ffff888020ae8000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 RBP: ffffc900030de950 R08: ffff888020ae8000 R09: 0000000000000006 R10: 00000000fffffffc R11: 0000000000000000 R12: 0000000000000007 R13: 1ffff1100b48a29a R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd49a8f800 CR3: 000000000c08e000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ocfs2_remove_btree_range+0xf19/0x15e0 fs/ocfs2/alloc.c:5770 ocfs2_commit_truncate+0xb68/0x1d50 fs/ocfs2/alloc.c:7346 ocfs2_truncate_for_delete fs/ocfs2/inode.c:623 [inline] ocfs2_wipe_inode fs/ocfs2/inode.c:790 [inline] ocfs2_delete_inode fs/ocfs2/inode.c:1079 [inline] ocfs2_evict_inode+0x1914/0x41d0 fs/ocfs2/inode.c:1216 evict+0x4c9/0x8d0 fs/inode.c:647 ocfs2_dentry_iput+0x24a/0x390 fs/ocfs2/dcache.c:418 __dentry_kill+0x431/0x650 fs/dcache.c:586 dentry_kill+0xb8/0x290 fs/dcache.c:-1 dput+0xd8/0x1a0 fs/dcache.c:893 __fput+0x5ee/0x930 fs/file_table.c:319 task_work_run+0x125/0x1a0 kernel/task_work.c:188 exit_task_work include/linux/task_work.h:33 [inline] do_exit+0x626/0x20c0 kernel/exit.c:884 do_group_exit+0x12e/0x300 kernel/exit.c:998 get_signal+0x6d6/0x12d0 kernel/signal.c:2900 arch_do_signal_or_restart+0xe7/0x12c0 arch/x86/kernel/signal.c:867 handle_signal_work kernel/entry/common.c:154 [inline] exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214 irqentry_exit_to_user_mode+0x5/0x30 kernel/entry/common.c:320 exc_page_fault+0x88/0x100 arch/x86/mm/fault.c:1499 asm_exc_page_fault+0x22/0x30 arch/x86/include/asm/idtentry.h:606 RIP: 0033:0xda8f2e Code: Unable to access opcode bytes at RIP 0xda8f04. RSP: 002b:00002000000000f8 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f99238dafa0 RCX: 00007f992366fef9 RDX: 0000200000000100 RSI: 00002000000000f0 RDI: 0000000040180000 RBP: 00007f9923704ee0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 00007f99238db038 R14: 00007f99238dafa0 R15: 00007ffd3b0555c8 Modules linked in: ---[ end trace f84913fd357e7ca1 ]--- RIP: 0010:ocfs2_remove_extent+0x1eb4/0x2010 fs/ocfs2/alloc.c:5573 Code: 7f fa ff ff 48 8b 4c 24 08 80 e1 07 fe c1 38 c1 0f 8c c0 fa ff ff 48 8b 7c 24 08 e8 56 03 a7 fe e9 b1 fa ff ff e8 9c e4 61 fe <0f> 0b 65 44 8b 3d da c3 ea 7c bf 07 00 00 00 44 89 fe e8 e5 e7 61 RSP: 0018:ffffc900030de620 EFLAGS: 00010293 RAX: ffffffff83175174 RBX: ffff88805a4514d0 RCX: ffff888020ae8000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 RBP: ffffc900030de950 R08: ffff888020ae8000 R09: 0000000000000006 R10: 00000000fffffffc R11: 0000000000000000 R12: 0000000000000007 R13: 1ffff1100b48a29a R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd49a8f800 CR3: 000000007e2f6000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400