INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 19140 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:728 [inline] register_lock_class+0xe82/0x11c0 kernel/locking/lockdep.c:754 __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3304 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 down_read+0x36/0x80 kernel/locking/rwsem.c:24 nilfs_bmap_lookup_at_level+0x7b/0x3e0 fs/nilfs2/bmap.c:68 nilfs_bmap_lookup fs/nilfs2/bmap.h:170 [inline] nilfs_mdt_submit_block.constprop.0+0x1a5/0xaa0 fs/nilfs2/mdt.c:142 nilfs_mdt_read_block+0x96/0x3e0 fs/nilfs2/mdt.c:175 nilfs_mdt_get_block+0xe6/0xd40 fs/nilfs2/mdt.c:250 nilfs_palloc_get_block+0xc4/0x2b0 fs/nilfs2/alloc.c:216 nilfs_palloc_get_entry_block+0x17b/0x230 fs/nilfs2/alloc.c:318 nilfs_ifile_get_inode_block+0xbf/0x170 fs/nilfs2/ifile.c:143 __nilfs_read_inode fs/nilfs2/inode.c:483 [inline] nilfs_iget+0x204/0x860 fs/nilfs2/inode.c:592 nilfs_get_root_dentry+0x26/0x250 fs/nilfs2/super.c:908 nilfs_fill_super fs/nilfs2/super.c:1082 [inline] nilfs_mount+0xac8/0xe70 fs/nilfs2/super.c:1321 mount_fs+0xa3/0x310 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2492 [inline] do_mount+0x115c/0x2f50 fs/namespace.c:2822 ksys_mount+0xcf/0x130 fs/namespace.c:3038 __do_sys_mount fs/namespace.c:3052 [inline] __se_sys_mount fs/namespace.c:3049 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3049 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5d0a6e0b6a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5d08c51f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5d0a6e0b6a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5d08c51fe0 RBP: 00007f5d08c52020 R08: 00007f5d08c52020 R09: 0000000020000000 R10: 0000000000000001 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f5d08c51fe0 R15: 0000000020000fc0 BUG: unable to handle kernel paging request at ffffffffffffffff PGD 9e6e067 P4D 9e6e067 PUD 9e70067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 19140 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:nilfs_bmap_lookup_at_level+0xcb/0x3e0 fs/nilfs2/bmap.c:69 Code: 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 80 3c 11 00 0f 85 7d 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 df 10 31 ff 41 89 c4 89 c6 e8 c7 1b b4 fe 45 85 e4 0f 88 98 01 00 RSP: 0018:ffff8880515f7650 EFLAGS: 00010246 RAX: ffffffffffffffff RBX: ffff88804a42e098 RCX: ffff8880515f7738 RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffff88804a42e098 RBP: ffff8880515f7738 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66501b R12: 0000000000000002 R13: 1ffff1100a2beecb R14: ffff88804a42e0d0 R15: 0000000000000001 FS: 00007f5d08c52700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffff CR3: 00000000aafbe000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nilfs_bmap_lookup fs/nilfs2/bmap.h:170 [inline] nilfs_mdt_submit_block.constprop.0+0x1a5/0xaa0 fs/nilfs2/mdt.c:142 nilfs_mdt_read_block+0x96/0x3e0 fs/nilfs2/mdt.c:175 nilfs_mdt_get_block+0xe6/0xd40 fs/nilfs2/mdt.c:250 nilfs_palloc_get_block+0xc4/0x2b0 fs/nilfs2/alloc.c:216 nilfs_palloc_get_entry_block+0x17b/0x230 fs/nilfs2/alloc.c:318 nilfs_ifile_get_inode_block+0xbf/0x170 fs/nilfs2/ifile.c:143 __nilfs_read_inode fs/nilfs2/inode.c:483 [inline] nilfs_iget+0x204/0x860 fs/nilfs2/inode.c:592 overlayfs: unrecognized mount option "uppezdir=./bus" or missing value nilfs_get_root_dentry+0x26/0x250 fs/nilfs2/super.c:908 nilfs_fill_super fs/nilfs2/super.c:1082 [inline] nilfs_mount+0xac8/0xe70 fs/nilfs2/super.c:1321 mount_fs+0xa3/0x310 fs/super.c:1261 vfs_kern_mount.part.0+0x68/0x470 fs/namespace.c:961 vfs_kern_mount fs/namespace.c:951 [inline] do_new_mount fs/namespace.c:2492 [inline] do_mount+0x115c/0x2f50 fs/namespace.c:2822 ksys_mount+0xcf/0x130 fs/namespace.c:3038 __do_sys_mount fs/namespace.c:3052 [inline] __se_sys_mount fs/namespace.c:3049 [inline] __x64_sys_mount+0xba/0x150 fs/namespace.c:3049 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5d0a6e0b6a Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 IPVS: ftp: loaded support on port[0] = 21 RSP: 002b:00007f5d08c51f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5d0a6e0b6a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5d08c51fe0 RBP: 00007f5d08c52020 R08: 00007f5d08c52020 R09: 0000000020000000 R10: 0000000000000001 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f5d08c51fe0 R15: 0000000020000fc0 netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. Modules linked in: CR2: ffffffffffffffff ---[ end trace 1f4049869cedc113 ]--- RIP: 0010:nilfs_bmap_lookup_at_level+0xcb/0x3e0 fs/nilfs2/bmap.c:69 Code: 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 80 3c 11 00 0f 85 7d 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 df 10 31 ff 41 89 c4 89 c6 e8 c7 1b b4 fe 45 85 e4 0f 88 98 01 00 RSP: 0018:ffff8880515f7650 EFLAGS: 00010246 RAX: ffffffffffffffff RBX: ffff88804a42e098 RCX: ffff8880515f7738 RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffff88804a42e098 RBP: ffff8880515f7738 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66501b R12: 0000000000000002 R13: 1ffff1100a2beecb R14: ffff88804a42e0d0 R15: 0000000000000001 FS: 00007f5d08c52700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffff CR3: 00000000aafbe000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 00 00 add %al,(%rax) 2: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 9: fc ff df c: 48 89 c1 mov %rax,%rcx f: 48 c1 e9 03 shr $0x3,%rcx 13: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 17: 0f 85 7d 02 00 00 jne 0x29a 1d: 4c 89 e6 mov %r12,%rsi 20: 48 89 e9 mov %rbp,%rcx 23: 44 89 fa mov %r15d,%edx 26: 48 89 df mov %rbx,%rdi * 29: ff 10 callq *(%rax) <-- trapping instruction 2b: 31 ff xor %edi,%edi 2d: 41 89 c4 mov %eax,%r12d 30: 89 c6 mov %eax,%esi 32: e8 c7 1b b4 fe callq 0xfeb41bfe 37: 45 85 e4 test %r12d,%r12d 3a: 0f .byte 0xf 3b: 88 .byte 0x88 3c: 98 cwtl 3d: 01 00 add %eax,(%rax)