Warning: Permanently added '[localhost]:10620' (ED25519) to the list of known hosts. executing program syzkaller login: [ 88.551322][ T5309] loop0: detected capacity change from 0 to 32768 [ 88.566136][ T5309] ======================================================= [ 88.566136][ T5309] WARNING: The mand mount option has been deprecated and [ 88.566136][ T5309] and is ignored by this kernel. Remove the mand [ 88.566136][ T5309] option from the mount to silence this warning. [ 88.566136][ T5309] ======================================================= [ 88.667204][ T5309] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.703985][ T25] audit: type=1800 audit(1748369891.777:2): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor403" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 88.721575][ T25] audit: type=1800 audit(1748369891.797:3): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor403" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 88.890206][ T5315] ------------[ cut here ]------------ [ 88.892739][ T5315] kernel BUG at fs/ocfs2/refcounttree.c:2890! [ 88.900955][ T5315] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 88.903775][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz-executor403 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(full) [ 88.908829][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.913424][ T5315] RIP: 0010:ocfs2_clear_cow_buffer+0x79/0x80 [ 88.916810][ T5315] Code: 02 75 21 e8 09 64 1f fe 48 89 df be 08 00 00 00 e8 bc 46 82 fe 3e 80 23 ef 31 c0 5b 41 5e c3 cc cc cc cc cc e8 e8 63 1f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 88.924706][ T5315] RSP: 0018:ffffc9000d3fed78 EFLAGS: 00010293 [ 88.927238][ T5315] RAX: ffffffff83a070c8 RBX: ffff888046d0bcb0 RCX: ffff8880003ec880 [ 88.930571][ T5315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 88.933763][ T5315] RBP: 0000000000000001 R08: ffff888046d0bcb7 R09: 1ffff11008da1796 [ 88.937040][ T5315] R10: dffffc0000000000 R11: ffffed1008da1797 R12: ffff888046d0bcb0 [ 88.940303][ T5315] R13: ffff888046d0bbc8 R14: 0000000000000002 R15: 0000000000001000 [ 88.943718][ T5315] FS: 00007f40099486c0(0000) GS:ffff88808d291000(0000) knlGS:0000000000000000 [ 88.947286][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.950147][ T5315] CR2: 00007f4009948d58 CR3: 000000003615b000 CR4: 0000000000352ef0 [ 88.953624][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.957002][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.960497][ T5315] Call Trace: [ 88.962003][ T5315] [ 88.963474][ T5315] walk_page_buffers+0x91/0x1e0 [ 88.965577][ T5315] ? __pfx_ocfs2_clear_cow_buffer+0x10/0x10 [ 88.968029][ T5315] ocfs2_duplicate_clusters_by_page+0x720/0xc90 [ 88.970698][ T5315] ? __pfx_ocfs2_duplicate_clusters_by_page+0x10/0x10 [ 88.973774][ T5315] ? ocfs2_start_trans+0x495/0x6d0 [ 88.975963][ T5315] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 88.978314][ T5315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.980910][ T5315] ? __pfx_ocfs2_duplicate_clusters_by_page+0x10/0x10 [ 88.983876][ T5315] ocfs2_replace_cow+0xac7/0x1b90 [ 88.986075][ T5315] ? __pfx_ocfs2_replace_cow+0x10/0x10 [ 88.988355][ T5315] ? down_write+0x162/0x1f0 [ 88.990284][ T5315] ? __pfx_down_write+0x10/0x10 [ 88.992414][ T5315] ? ocfs2_lock_refcount_tree+0x852/0x990 [ 88.994794][ T5315] ? __pfx_ocfs2_lock_refcount_tree+0x10/0x10 [ 88.997407][ T5315] ? __kasan_kmalloc+0x93/0xb0 [ 88.999459][ T5315] ? ocfs2_refcount_cow+0x52e/0xc90 [ 89.001709][ T5315] ocfs2_refcount_cow+0x779/0xc90 [ 89.003900][ T5315] ? __pfx_ocfs2_refcount_cow+0x10/0x10 [ 89.006268][ T5315] ? down_write+0x162/0x1f0 [ 89.008148][ T5315] ? do_raw_spin_unlock+0x4d/0x240 [ 89.010382][ T5315] ? ocfs2_inode_lock_for_extent_tree+0x72/0x190 [ 89.013148][ T5315] ocfs2_file_write_iter+0xe28/0x1d10 [ 89.015622][ T5315] ? kasan_save_track+0x3e/0x80 [ 89.017668][ T5315] ? __kasan_kmalloc+0x93/0xb0 [ 89.019749][ T5315] ? __kmalloc_noprof+0x27a/0x4f0 [ 89.021887][ T5315] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 89.024447][ T5315] ? splice_from_pipe_next+0x608/0x660 [ 89.026809][ T5315] ? iter_file_splice_write+0x1cb/0x1000 [ 89.029226][ T5315] ? __asan_memset+0x22/0x50 [ 89.031341][ T5315] iter_file_splice_write+0x93a/0x1000 [ 89.033756][ T5315] ? __pfx_iter_file_splice_write+0x10/0x10 [ 89.036368][ T5315] ? rcu_read_lock_any_held+0xb3/0x120 [ 89.038701][ T5315] ? direct_splice_actor+0x10c/0x160 [ 89.041010][ T5315] ? __pfx_iter_file_splice_write+0x10/0x10 [ 89.043570][ T5315] direct_splice_actor+0x101/0x160 [ 89.045789][ T5315] splice_direct_to_actor+0x5a5/0xcc0 [ 89.048133][ T5315] ? __pfx_direct_splice_actor+0x10/0x10 [ 89.050541][ T5315] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 89.053102][ T5315] ? __pfx_aa_file_perm+0x10/0x10 [ 89.055229][ T5315] do_splice_direct+0x181/0x270 [ 89.057278][ T5315] ? __pfx_do_splice_direct+0x10/0x10 [ 89.059619][ T5315] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 89.062202][ T5315] ? rw_verify_area+0x258/0x650 [ 89.064304][ T5315] do_sendfile+0x4da/0x7e0 [ 89.066237][ T5315] ? __pfx_do_sendfile+0x10/0x10 [ 89.068325][ T5315] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.070594][ T5315] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.072976][ T5315] ? __se_sys_rt_sigprocmask+0x22d/0x290 [ 89.075357][ T5315] __se_sys_sendfile64+0x13e/0x190 [ 89.077752][ T5315] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 89.080207][ T5315] ? do_syscall_64+0xba/0x220 [ 89.082674][ T5315] do_syscall_64+0xf6/0x220 [ 89.085114][ T5315] ? ret_from_fork_asm+0x1a/0x30 [ 89.087552][ T5315] ? clear_bhb_loop+0x60/0xb0 [ 89.089646][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.092144][ T5315] RIP: 0033:0x7f40099d64b9 [ 89.094129][ T5315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.101904][ T5315] RSP: 002b:00007f4009948168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 89.105480][ T5315] RAX: ffffffffffffffda RBX: 00007f4009a61628 RCX: 00007f40099d64b9 [ 89.108898][ T5315] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 89.112364][ T5315] RBP: 00007f4009a61620 R08: 00007ffcb551e327 R09: 0000000000000000 [ 89.115793][ T5315] R10: 0000000800000009 R11: 0000000000000246 R12: 00007f4009a6162c [ 89.119188][ T5315] R13: 000000000000006e R14: 00007ffcb551e240 R15: 00007ffcb551e328 [ 89.122555][ T5315] [ 89.123921][ T5315] Modules linked in: [ 89.126427][ T5315] ---[ end trace 0000000000000000 ]--- [ 89.148078][ T5315] RIP: 0010:ocfs2_clear_cow_buffer+0x79/0x80 [ 89.150952][ T5315] Code: 02 75 21 e8 09 64 1f fe 48 89 df be 08 00 00 00 e8 bc 46 82 fe 3e 80 23 ef 31 c0 5b 41 5e c3 cc cc cc cc cc e8 e8 63 1f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 89.159891][ T5315] RSP: 0018:ffffc9000d3fed78 EFLAGS: 00010293 [ 89.162736][ T5315] RAX: ffffffff83a070c8 RBX: ffff888046d0bcb0 RCX: ffff8880003ec880 [ 89.167760][ T5315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 89.171135][ T5315] RBP: 0000000000000001 R08: ffff888046d0bcb7 R09: 1ffff11008da1796 [ 89.175569][ T5315] R10: dffffc0000000000 R11: ffffed1008da1797 R12: ffff888046d0bcb0 [ 89.179571][ T5315] R13: ffff888046d0bbc8 R14: 0000000000000002 R15: 0000000000001000 [ 89.183244][ T5315] FS: 00007f40099486c0(0000) GS:ffff88808d291000(0000) knlGS:0000000000000000 [ 89.187612][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.190624][ T5315] CR2: 0000559e837290e0 CR3: 000000003615b000 CR4: 0000000000352ef0 [ 89.194414][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.197969][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.201398][ T5315] Kernel panic - not syncing: Fatal exception [ 89.204526][ T5315] Kernel Offset: disabled [ 89.206381][ T5315] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:18:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff81f9affa RCX=0000000080000000 RDX=0000000000000000 RSI=ffffffff8d95a9e9 RDI=ffffffff8be24c40 RBP=ffffc900026d7880 RSP=ffffc900026d76f0 R8 =ffffffff8f9fc2b7 R9 =1ffffffff1f3f856 R10=dffffc0000000000 R11=fffffbfff1f3f857 R12=dffffc0000000000 R13=ffffea00011c3840 R14=ffff888033032440 R15=0000000000000001 RIP=ffffffff8b5de343 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d291000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4009948d58 CR3=0000000011535000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005567bec6ec50 00005567bec6ec50 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff42cf2850 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20475542206c656e 72656b205d353133 3554205b5d393337 3239382e38382020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d73657220383530 37313d6f6e692022 30706f6f6c223d76 6564202231656c69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66223d656d616e20 22333034726f7475 636578652d7a7973 223d6d6d6f632029 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f69746365726964 2864656c6961663d 6573756163206174 61645f7463656c6c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f633d706f206465 6e69666e6f636e75 3d6a627573203539 3237363934393234 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000