INFO: trying to register non-static key. the code is fine but needs lockdep annotation. NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds turning off the locking correctness validator. CPU: 1 PID: 7961 Comm: syz-executor233 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 down_read+0x36/0x80 kernel/locking/rwsem.c:24 nilfs_bmap_lookup_at_level+0x6b/0x380 fs/nilfs2/bmap.c:77 nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f439ff0a06a RSP: 002b:00007ffe09e4c168 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f439ff0a06a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe09e4c180 RBP: 00007ffe09e4c180 R08: 00007ffe09e4c1c0 R09: 00005555562722c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007ffe09e4c1c0 R14: 000000000000005c R15: 0000000020000aa0 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 7961 Comm: syz-executor233 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 task: ffff888099a34680 task.stack: ffff888096950000 RIP: 0010:nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: 0018:ffff888096957750 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88808debe098 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff11012d2ae93 RDI: ffff88808debe158 RBP: ffff888096957818 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffff888099a34680 R12: 0000000000000002 R13: 1ffff11012d2aeeb R14: ffff88808debe0d0 R15: 0000000000000001 FS: 0000555556272300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f439fee0e80 CR3: 00000000b4204000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f439ff0a06a RSP: 002b:00007ffe09e4c168 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f439ff0a06a RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe09e4c180 RBP: 00007ffe09e4c180 R08: 00007ffe09e4c1c0 R09: 00005555562722c0 R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 R13: 00007ffe09e4c1c0 R14: 000000000000005c R15: 0000000020000aa0 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 69 02 00 00 48 8b 83 c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 32 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 RIP: nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: ffff888096957750 ---[ end trace 6b0fb6bc62974a2d ]--- ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: fa cli 4: 48 c1 ea 03 shr $0x3,%rdx 8: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) c: 0f 85 69 02 00 00 jne 0x27b 12: 48 8b 83 c0 00 00 00 mov 0xc0(%rbx),%rax 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 48 89 c1 mov %rax,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 32 02 00 00 jne 0x266 34: 4c 89 e6 mov %r12,%rsi 37: 48 89 e9 mov %rbp,%rcx 3a: 44 89 fa mov %r15d,%edx 3d: 48 rex.W 3e: 89 .byte 0x89