NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) INFO: trying to register non-static key. NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 7968 Comm: syz-executor359 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 down_read+0x36/0x80 kernel/locking/rwsem.c:24 nilfs_bmap_lookup_at_level+0x6b/0x380 fs/nilfs2/bmap.c:77 nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7eff23b3968a RSP: 002b:00007ffc76c242c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007eff23b3968a RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffc76c242e0 RBP: 00007ffc76c242e0 R08: 00007ffc76c24320 R09: 0000555556b092c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007ffc76c24320 R14: 000000000000003b R15: 0000000020000788 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 7968 Comm: syz-executor359 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 task: ffff88809db92100 task.stack: ffff8880a2268000 RIP: 0010:nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: 0018:ffff8880a226f750 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88808dafd098 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff1101444de93 RDI: ffff88808dafd158 RBP: ffff8880a226f818 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffff88809db92100 R12: 0000000000000002 R13: 1ffff1101444deeb R14: ffff88808dafd0d0 R15: 0000000000000001 FS: 0000555556b09300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c1ae801b58 CR3: 00000000b07f4000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7eff23b3968a RSP: 002b:00007ffc76c242c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007eff23b3968a RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007ffc76c242e0 RBP: 00007ffc76c242e0 R08: 00007ffc76c24320 R09: 0000555556b092c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007ffc76c24320 R14: 000000000000003b R15: 0000000020000788 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 69 02 00 00 48 8b 83 c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 32 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 RIP: nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: ffff8880a226f750 ---[ end trace fa255af9f57c13d2 ]--- ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: fa cli 4: 48 c1 ea 03 shr $0x3,%rdx 8: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) c: 0f 85 69 02 00 00 jne 0x27b 12: 48 8b 83 c0 00 00 00 mov 0xc0(%rbx),%rax 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 48 89 c1 mov %rax,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 32 02 00 00 jne 0x266 34: 4c 89 e6 mov %r12,%rsi 37: 48 89 e9 mov %rbp,%rcx 3a: 44 89 fa mov %r15d,%edx 3d: 48 rex.W 3e: 89 .byte 0x89