[ OK ] Started System Logging Service. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.764694] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 27.764905] INFO: trying to register non-static key. [ 27.779593] the code is fine but needs lockdep annotation. [ 27.785210] turning off the locking correctness validator. [ 27.790827] CPU: 1 PID: 8001 Comm: syz-executor211 Not tainted 4.14.295-syzkaller #0 [ 27.798695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 27.808023] Call Trace: [ 27.810593] dump_stack+0x1b2/0x281 [ 27.814220] register_lock_class+0x389/0x1180 [ 27.818712] ? static_obj+0x50/0x50 [ 27.822313] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 27.827650] ? save_trace+0xd6/0x290 [ 27.831335] __lock_acquire+0x167/0x3f20 [ 27.835375] ? cache_alloc_refill+0x2fa/0x350 [ 27.839864] ? trace_hardirqs_on+0x10/0x10 [ 27.844070] ? trace_hardirqs_on+0x10/0x10 [ 27.848278] ? lock_downgrade+0x740/0x740 [ 27.852401] ? alloc_buffer_head+0x20/0x110 [ 27.856719] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 27.862154] lock_acquire+0x170/0x3f0 [ 27.865930] ? nilfs_bmap_lookup_at_level+0x6b/0x380 [ 27.871029] down_read+0x36/0x80 [ 27.874372] ? nilfs_bmap_lookup_at_level+0x6b/0x380 [ 27.879461] nilfs_bmap_lookup_at_level+0x6b/0x380 [ 27.884375] ? nilfs_bmap_get_dat+0xc0/0xc0 [ 27.888672] nilfs_mdt_submit_block.constprop.0+0x152/0x970 [ 27.894355] ? nilfs_mdt_write_page+0x250/0x250 [ 27.899009] nilfs_mdt_read_block+0x7c/0x320 [ 27.903396] ? nilfs_mdt_submit_block.constprop.0+0x970/0x970 [ 27.909258] ? __lock_acquire+0x2190/0x3f20 [ 27.913557] nilfs_mdt_get_block+0xc7/0xb90 [ 27.917857] ? nilfs_mdt_read_block+0x320/0x320 [ 27.922501] ? lock_downgrade+0x740/0x740 [ 27.926642] nilfs_palloc_get_block+0xb2/0x250 [ 27.931207] nilfs_palloc_get_entry_block+0x17d/0x230 [ 27.936370] ? nilfs_iget+0x18e/0x810 [ 27.940147] nilfs_ifile_get_inode_block+0xb4/0x150 [ 27.945142] nilfs_iget+0x1c2/0x810 [ 27.948741] ? nilfs_iget_locked+0xb0/0xb0 [ 27.952954] ? nilfs_attach_log_writer+0x64d/0x9d0 [ 27.957876] ? nilfs_detach_log_writer+0x980/0x980 [ 27.962776] ? wait_woken+0x230/0x230 [ 27.966548] nilfs_get_root_dentry+0x24/0x1f0 [ 27.971023] nilfs_mount+0x984/0xd00 [ 27.974714] ? nilfs_attach_checkpoint+0x420/0x420 [ 27.979615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 27.985040] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 27.990029] ? alloc_pages_current+0x15d/0x260 [ 27.994585] ? __lockdep_init_map+0x100/0x560 [ 27.999052] mount_fs+0x92/0x2a0 [ 28.002401] vfs_kern_mount.part.0+0x5b/0x470 [ 28.006866] do_mount+0xe65/0x2a30 [ 28.010383] ? retint_kernel+0x2d/0x2d [ 28.014255] ? copy_mount_string+0x40/0x40 [ 28.018474] ? memset+0x20/0x40 [ 28.021842] ? copy_mount_options+0x1fa/0x2f0 [ 28.026312] ? copy_mnt_ns+0xa30/0xa30 [ 28.030174] SyS_mount+0xa8/0x120 [ 28.033602] ? copy_mnt_ns+0xa30/0xa30 [ 28.037462] do_syscall_64+0x1d5/0x640 [ 28.041323] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.046485] RIP: 0033:0x7feab286b53a [ 28.050169] RSP: 002b:00007ffc3bab4148 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 28.057850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feab286b53a [ 28.065093] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc3bab4160 [ 28.072344] RBP: 00007ffc3bab4160 R08: 00007ffc3bab41a0 R09: 0000555556ce12c0 [ 28.079585] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 28.086826] R13: 00007ffc3bab41a0 R14: 0000000000000039 R15: 0000000020000758 [ 28.094441] kasan: CONFIG_KASAN_INLINE enabled [ 28.099090] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 28.106493] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 28.112712] Modules linked in: [ 28.115896] CPU: 1 PID: 8001 Comm: syz-executor211 Not tainted 4.14.295-syzkaller #0 [ 28.123750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 28.133087] task: ffff888098216300 task.stack: ffff888095930000 [ 28.139209] RIP: 0010:nilfs_bmap_lookup_at_level+0xa5/0x380 [ 28.144887] RSP: 0018:ffff888095937750 EFLAGS: 00010246 [ 28.150223] RAX: 0000000000000000 RBX: ffff88808db81098 RCX: 0000000000000000 [ 28.157465] RDX: dffffc0000000000 RSI: 1ffff11012b26e93 RDI: ffff88808db81158 [ 28.164708] RBP: ffff888095937818 R08: 0000000000000001 R09: 0000000000000000 [ 28.171950] R10: 0000000000000001 R11: ffff888098216300 R12: 0000000000000002 [ 28.179192] R13: 1ffff11012b26eeb R14: ffff88808db810d0 R15: 0000000000000001 [ 28.186541] FS: 0000555556ce1300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 28.194736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.200761] CR2: 00007ffc3bab5000 CR3: 00000000a1b47000 CR4: 00000000003406e0 [ 28.208011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.215253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.222494] Call Trace: [ 28.225060] ? nilfs_bmap_get_dat+0xc0/0xc0 [ 28.229354] nilfs_mdt_submit_block.constprop.0+0x152/0x970 [ 28.235039] ? nilfs_mdt_write_page+0x250/0x250 [ 28.239680] nilfs_mdt_read_block+0x7c/0x320 [ 28.244186] ? nilfs_mdt_submit_block.constprop.0+0x970/0x970 [ 28.250051] ? __lock_acquire+0x2190/0x3f20 [ 28.254353] nilfs_mdt_get_block+0xc7/0xb90 [ 28.258652] ? nilfs_mdt_read_block+0x320/0x320 [ 28.263297] ? lock_downgrade+0x740/0x740 [ 28.267421] nilfs_palloc_get_block+0xb2/0x250 [ 28.271979] nilfs_palloc_get_entry_block+0x17d/0x230 [ 28.277141] ? nilfs_iget+0x18e/0x810 [ 28.280933] nilfs_ifile_get_inode_block+0xb4/0x150 [ 28.285927] nilfs_iget+0x1c2/0x810 [ 28.289553] ? nilfs_iget_locked+0xb0/0xb0 [ 28.293760] ? nilfs_attach_log_writer+0x64d/0x9d0 [ 28.298661] ? nilfs_detach_log_writer+0x980/0x980 [ 28.303593] ? wait_woken+0x230/0x230 [ 28.307369] nilfs_get_root_dentry+0x24/0x1f0 [ 28.311839] nilfs_mount+0x984/0xd00 [ 28.315528] ? nilfs_attach_checkpoint+0x420/0x420 [ 28.320428] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 28.325853] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 28.330842] ? alloc_pages_current+0x15d/0x260 [ 28.335393] ? __lockdep_init_map+0x100/0x560 [ 28.339859] mount_fs+0x92/0x2a0 [ 28.343197] vfs_kern_mount.part.0+0x5b/0x470 [ 28.347668] do_mount+0xe65/0x2a30 [ 28.351182] ? retint_kernel+0x2d/0x2d [ 28.355041] ? copy_mount_string+0x40/0x40 [ 28.359247] ? memset+0x20/0x40 [ 28.362498] ? copy_mount_options+0x1fa/0x2f0 [ 28.366964] ? copy_mnt_ns+0xa30/0xa30 [ 28.370823] SyS_mount+0xa8/0x120 [ 28.374249] ? copy_mnt_ns+0xa30/0xa30 [ 28.378107] do_syscall_64+0x1d5/0x640 [ 28.381968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 28.387135] RIP: 0033:0x7feab286b53a [ 28.390820] RSP: 002b:00007ffc3bab4148 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 28.398505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feab286b53a [ 28.405750] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc3bab4160 [ 28.412992] RBP: 00007ffc3bab4160 R08: 00007ffc3bab41a0 R09: 0000555556ce12c0 [ 28.420238] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 28.427479] R13: 00007ffc3bab41a0 R14: 0000000000000039 R15: 0000000020000758 [ 28.434724] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 69 02 00 00 48 8b 83 c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 32 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 [ 28.453784] RIP: nilfs_bmap_lookup_at_level+0xa5/0x380 RSP: ffff888095937750 [ 28.461313] ---[ end trace ebd8b27688a631af ]--- [ 28.466059] Kernel panic - not syncing: Fatal exception [ 28.471591] Kernel Offset: disabled [ 28.475303] Rebooting in 86400 seconds..