NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 7952 Comm: syz-executor197 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 down_read+0x36/0x80 kernel/locking/rwsem.c:24 nilfs_bmap_lookup_at_level+0x6b/0x380 fs/nilfs2/bmap.c:77 nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f2b8ec6261a RSP: 002b:00007fff7faa21b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2b8ec6261a RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 00007fff7faa21d0 RBP: 00007fff7faa21d0 R08: 00007fff7faa2210 R09: 00005555560742c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007fff7faa2210 R14: 0000000000000039 R15: 0000000020000758 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 7952 Comm: syz-executor197 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 task: ffff8880989b0340 task.stack: ffff888095d50000 RIP: 0010:nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: 0018:ffff888095d57750 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88808e37d098 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff11012baae93 RDI: ffff88808e37d158 RBP: ffff888095d57818 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffff8880989b0340 R12: 0000000000000002 R13: 1ffff11012baaeeb R14: ffff88808e37d0d0 R15: 0000000000000001 FS: 0000555556074300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff7faa3000 CR3: 00000000aed36000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f2b8ec6261a RSP: 002b:00007fff7faa21b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2b8ec6261a RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 00007fff7faa21d0 RBP: 00007fff7faa21d0 R08: 00007fff7faa2210 R09: 00005555560742c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007fff7faa2210 R14: 0000000000000039 R15: 0000000020000758 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 69 02 00 00 48 8b 83 c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 32 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 RIP: nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: ffff888095d57750 ---[ end trace d09c233b19b9a530 ]--- ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: fa cli 4: 48 c1 ea 03 shr $0x3,%rdx 8: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) c: 0f 85 69 02 00 00 jne 0x27b 12: 48 8b 83 c0 00 00 00 mov 0xc0(%rbx),%rax 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 48 89 c1 mov %rax,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 32 02 00 00 jne 0x266 34: 4c 89 e6 mov %r12,%rsi 37: 48 89 e9 mov %rbp,%rcx 3a: 44 89 fa mov %r15d,%edx 3d: 48 rex.W 3e: 89 .byte 0x89