overlayfs: fs on 'file0' does not support file handles, falling back to index=off. BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1366 in_atomic(): 0, irqs_disabled(): 1, pid: 12217, name: syz-executor.2 no locks held by syz-executor.2/12217. irq event stamp: 6427 hardirqs last enabled at (6427): [] do_syscall_64+0x53/0x640 arch/x86/entry/common.c:280 hardirqs last disabled at (6426): [] entry_SYSCALL_64_after_hwframe+0x3a/0xb7 softirqs last enabled at (3568): [] sock_net include/net/sock.h:2328 [inline] softirqs last enabled at (3568): [] unix_create1+0x42b/0x500 net/unix/af_unix.c:793 softirqs last disabled at (3566): [] init_waitqueue_func_entry include/linux/wait.h:91 [inline] softirqs last disabled at (3566): [] unix_create1+0x385/0x500 net/unix/af_unix.c:786 CPU: 0 PID: 12217 Comm: syz-executor.2 Not tainted 4.14.136 #32 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x138/0x19c lib/dump_stack.c:53 ___might_sleep.cold+0x1bd/0x1f6 kernel/sched/core.c:6039 __might_sleep+0x93/0xb0 kernel/sched/core.c:5992 __do_page_fault+0x2ed/0xb80 arch/x86/mm/fault.c:1366 do_page_fault+0x71/0x511 arch/x86/mm/fault.c:1498 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1120 RIP: 0010:atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RIP: 0010:__lock_acquire+0x20c/0x4620 kernel/locking/lockdep.c:3378 RSP: 0018:ffff888085407480 EFLAGS: 00010086 RAX: ffffffffffffffff RBX: 0000000000000001 RCX: 0000000000000001 RDX: 1ffff11012881262 RSI: 0000000000000000 RDI: ffff888094409310 RBP: ffff888085407630 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: ffff888030df0480 R12: ffff888094409308 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 lock_acquire+0x16f/0x430 kernel/locking/lockdep.c:3991 kernfs_get_active fs/kernfs/dir.c:421 [inline] kernfs_get_active+0xb6/0xe0 fs/kernfs/dir.c:412 kernfs_fop_poll+0x11f/0x280 fs/kernfs/file.c:841 do_select+0x8c0/0x13b0 fs/select.c:513 core_sys_select+0x461/0x6d0 fs/select.c:656 do_pselect fs/select.c:733 [inline] SYSC_pselect6 fs/select.c:774 [inline] SyS_pselect6+0x3f2/0x460 fs/select.c:759 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x459829 RSP: 002b:00007f64c3f01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459829 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 RBP: 000000000075bf20 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000020000140 R11: 0000000000000246 R12: 00007f64c3f026d4 R13: 00000000004c6b6c R14: 00000000004dbc88 R15: 00000000ffffffff BUG: unable to handle kernel NULL pointer dereference at 0000000000000137 IP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] IP: __lock_acquire+0x20c/0x4620 kernel/locking/lockdep.c:3378 PGD 94cd7067 P4D 94cd7067 PUD 7fd1f067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 12217 Comm: syz-executor.2 Tainted: G W 4.14.136 #32 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888030df0480 task.stack: ffff888085400000 RIP: 0010:atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RIP: 0010:__lock_acquire+0x20c/0x4620 kernel/locking/lockdep.c:3378 RSP: 0018:ffff888085407480 EFLAGS: 00010086 RAX: ffffffffffffffff RBX: 0000000000000001 RCX: 0000000000000001 kobject: 'loop1' (ffff8880a4966960): kobject_uevent_env RDX: 1ffff11012881262 RSI: 0000000000000000 RDI: ffff888094409310 kobject: 'loop1' (ffff8880a4966960): fill_kobj_path: path = '/devices/virtual/block/loop1' RBP: ffff888085407630 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: ffff888030df0480 R12: ffff888094409308 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 FS: 00007f64c3f02700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000137 CR3: 0000000090ebc000 CR4: 00000000001406f0 Call Trace: lock_acquire+0x16f/0x430 kernel/locking/lockdep.c:3991 kernfs_get_active fs/kernfs/dir.c:421 [inline] kernfs_get_active+0xb6/0xe0 fs/kernfs/dir.c:412 kernfs_fop_poll+0x11f/0x280 fs/kernfs/file.c:841 do_select+0x8c0/0x13b0 fs/select.c:513 core_sys_select+0x461/0x6d0 fs/select.c:656 do_pselect fs/select.c:733 [inline] SYSC_pselect6 fs/select.c:774 [inline] SyS_pselect6+0x3f2/0x460 fs/select.c:759 do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x459829 RSP: 002b:00007f64c3f01c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459829 RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 RBP: 000000000075bf20 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000020000140 R11: 0000000000000246 R12: 00007f64c3f026d4 R13: 00000000004c6b6c R14: 00000000004dbc88 R15: 00000000ffffffff Code: 00 fc ff df 41 89 f5 4b 8d 7c ec 08 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 2e 00 00 4b 8b 44 ec 08 48 85 c0 0f 84 15 ff ff ff ff 80 38 01 00 00 49 8d b3 78 08 00 00 48 ba 00 00 00 00 00 RIP: atomic_inc arch/x86/include/asm/atomic.h:92 [inline] RSP: ffff888085407480 RIP: __lock_acquire+0x20c/0x4620 kernel/locking/lockdep.c:3378 RSP: ffff888085407480 CR2: 0000000000000137 ---[ end trace 4ad51fb04af521ad ]---