overlayfs: upper fs is r/o, try multi-lower layers mount overlayfs: failed to create directory ./file1/work (errno: 30); mounting read-only ===================================== WARNING: bad unlock balance detected! 4.14.154 #0 Not tainted ------------------------------------- syz-executor.2/19801 is trying to release lock (sb_writers) at: [] sb_end_write include/linux/fs.h:1500 [inline] [] mnt_drop_write+0x3e/0x50 fs/namespace.c:532 but there are no more locks to release! other info that might help us debug this: 1 lock held by syz-executor.2/19801: #0: (&type->s_umount_key#60/1){+.+.}, at: [] alloc_super fs/super.c:251 [inline] #0: (&type->s_umount_key#60/1){+.+.}, at: [] sget_userns+0x551/0xc30 fs/super.c:516 stack backtrace: CPU: 0 PID: 19801 Comm: syz-executor.2 Not tainted 4.14.154 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x142/0x197 lib/dump_stack.c:58 print_unlock_imbalance_bug kernel/locking/lockdep.c:3548 [inline] print_unlock_imbalance_bug.cold+0x114/0x123 kernel/locking/lockdep.c:3525 __lock_release kernel/locking/lockdep.c:3765 [inline] lock_release+0x616/0x940 kernel/locking/lockdep.c:4013 percpu_up_read_preempt_enable include/linux/percpu-rwsem.h:102 [inline] percpu_up_read include/linux/percpu-rwsem.h:108 [inline] __sb_end_write+0xc1/0x100 fs/super.c:1329 sb_end_write include/linux/fs.h:1500 [inline] mnt_drop_write+0x3e/0x50 fs/namespace.c:532 ovl_workdir_create.cold+0x101/0x10d fs/overlayfs/super.c:546 ovl_fill_super+0x100c/0x2660 fs/overlayfs/super.c:988 mount_nodev+0x52/0xf0 fs/super.c:1180 ovl_mount+0x2d/0x40 fs/overlayfs/super.c:1204 mount_fs+0x97/0x2a1 fs/super.c:1237 vfs_kern_mount.part.0+0x5e/0x3d0 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2549 [inline] do_mount+0x417/0x27d0 fs/namespace.c:2879 SYSC_mount fs/namespace.c:3095 [inline] SyS_mount+0xab/0x120 fs/namespace.c:3072 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a219 RSP: 002b:00007f251d7c7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a219 RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000040000f RBP: 000000000075bfc8 R08: 0000000020000a00 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f251d7c86d4 R13: 00000000004c6d82 R14: 00000000004dc5f8 R15: 00000000ffffffff kobject: 'loop0' (ffff88805ab395e0): kobject_uevent_env kobject: 'loop0' (ffff88805ab395e0): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'hwsim84' (ffff888073a74cd0): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'hwsim84' (ffff888073a74cd0): kobject_uevent_env overlayfs: unrecognized mount option "À" or missing value kobject: 'hwsim84' (ffff888073a74cd0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84' kobject: 'hwsim84' (ffff888073a74cd0): kobject_uevent_env kobject: 'hwsim84' (ffff888073a74cd0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84' kobject: 'ieee80211' (ffff888099676800): kobject_add_internal: parent: 'hwsim84', set: '(null)' kobject: 'phy84' (ffff88807555bd70): kobject_add_internal: parent: 'ieee80211', set: 'devices' kobject: 'phy84' (ffff88807555bd70): kobject_uevent_env kobject: 'phy84' (ffff88807555bd70): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/ieee80211/phy84' kobject: 'rfkill87' (ffff888073a75628): kobject_add_internal: parent: 'phy84', set: 'devices' kobject: 'rfkill87' (ffff888073a75628): kobject_uevent_env kobject: 'rfkill87' (ffff888073a75628): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/ieee80211/phy84/rfkill87' kobject: 'loop4' (ffff8880a4a872a0): kobject_uevent_env ieee80211 phy84: Selected rate control algorithm 'minstrel_ht' kobject: 'loop4' (ffff8880a4a872a0): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'net' (ffff8880935b7c80): kobject_add_internal: parent: 'hwsim84', set: '(null)' kobject: 'wlan58' (ffff8880754f14b0): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'wlan58' (ffff8880754f14b0): kobject_uevent_env kobject: 'wlan58' (ffff8880754f14b0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58' kobject: 'queues' (ffff88800e8e5548): kobject_add_internal: parent: 'wlan58', set: '' kobject: 'queues' (ffff88800e8e5548): kobject_uevent_env kobject: 'queues' (ffff88800e8e5548): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff888096586910): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff888096586910): kobject_uevent_env kobject: 'rx-0' (ffff888096586910): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58/queues/rx-0' kobject: 'tx-0' (ffff88804bbb8d18): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88804bbb8d18): kobject_uevent_env kobject: 'tx-0' (ffff88804bbb8d18): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58/queues/tx-0' kobject: 'tx-1' (ffff88804bbb8e98): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-1' (ffff88804bbb8e98): kobject_uevent_env kobject: 'tx-1' (ffff88804bbb8e98): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58/queues/tx-1' kobject: 'tx-2' (ffff88804bbb9018): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-2' (ffff88804bbb9018): kobject_uevent_env kobject: 'tx-2' (ffff88804bbb9018): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58/queues/tx-2' kobject: 'tx-3' (ffff88804bbb9198): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-3' (ffff88804bbb9198): kobject_uevent_env kobject: 'tx-3' (ffff88804bbb9198): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim84/net/wlan58/queues/tx-3' kobject: 'batman_adv' (ffff888096446400): kobject_add_internal: parent: 'wlan58', set: '' ieee80211 phy84: hwaddr 02:00:00:00:54:00 registered kobject: 'loop0' (ffff88805ab395e0): kobject_uevent_env kobject: 'loop0' (ffff88805ab395e0): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (ffff8880a4a349a0): kobject_uevent_env overlayfs: './file0' not a directory kobject: 'loop3' (ffff8880a4a349a0): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'hwsim85' (ffff888071ff5650): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' kobject: 'hwsim85' (ffff888071ff5650): kobject_uevent_env ------------[ cut here ]------------ kobject: 'hwsim85' (ffff888071ff5650): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim85' WARNING: CPU: 0 PID: 5690 at fs/namespace.c:1178 cleanup_mnt+0x104/0x150 fs/namespace.c:1178