overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9262, name: syz.5.1198 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 4 locks held by syz.5.1198/9262: #0: ffff888025dbdb38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 fs/file.c:1213 #1: ffff888050db0168 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 fs/readdir.c:54 #2: ffff888013668148 (&type->i_mutex_dir_key#8 ){.+.+}-{4:4}, at: iterate_dir+0x18b/0xb40 fs/readdir.c:101 #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 fs/afs/dynroot.c:351 CPU: 0 UID: 0 PID: 9262 Comm: syz.5.1198 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8818 might_alloc include/linux/sched/mm.h:321 [inline] might_alloc include/linux/sched/mm.h:316 [inline] slab_pre_alloc_hook mm/slub.c:4102 [inline] slab_alloc_node mm/slub.c:4180 [inline] __do_kmalloc_node mm/slub.c:4330 [inline] __kmalloc_noprof+0x386/0x510 mm/slub.c:4343 kmalloc_noprof include/linux/slab.h:909 [inline] ovl_cache_entry_new+0x3d/0x730 fs/overlayfs/readdir.c:152 ovl_fill_lowest fs/overlayfs/readdir.c:211 [inline] ovl_fill_merge+0x2c1/0xa90 fs/overlayfs/readdir.c:268 dir_emit include/linux/fs.h:3861 [inline] afs_dynroot_readdir_cells fs/afs/dynroot.c:310 [inline] afs_dynroot_readdir+0x9bb/0xf50 fs/afs/dynroot.c:352 iterate_dir+0x293/0xb40 fs/readdir.c:108 ovl_dir_read fs/overlayfs/readdir.c:313 [inline] ovl_dir_read_merged+0x3ef/0x5d0 fs/overlayfs/readdir.c:379 ovl_cache_get fs/overlayfs/readdir.c:422 [inline] ovl_iterate+0x86c/0xe40 fs/overlayfs/readdir.c:783 wrap_directory_iterator+0x9f/0xe0 fs/readdir.c:65 iterate_dir+0x293/0xb40 fs/readdir.c:108 __do_compat_sys_getdents fs/readdir.c:568 [inline] __se_compat_sys_getdents fs/readdir.c:554 [inline] __ia32_compat_sys_getdents+0x14d/0x2c0 fs/readdir.c:554 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline] __do_fast_syscall_32+0x73/0x120 arch/x86/entry/syscall_32.c:306 do_fast_syscall_32+0x32/0x80 arch/x86/entry/syscall_32.c:331 entry_SYSENTER_compat_after_hwframe+0x84/0x8e RIP: 0023:0xf747e579 Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 000000000000008d RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess), 2 bytes skipped: 0: 10 06 adc %al,(%rsi) 2: 03 74 b4 01 add 0x1(%rsp,%rsi,4),%esi 6: 10 07 adc %al,(%rdi) 8: 03 74 b0 01 add 0x1(%rax,%rsi,4),%esi c: 10 08 adc %cl,(%rax) e: 03 74 d8 01 add 0x1(%rax,%rbx,8),%esi 1e: 00 51 52 add %dl,0x52(%rcx) 21: 55 push %rbp 22: 89 e5 mov %esp,%ebp 24: 0f 34 sysenter 26: cd 80 int $0x80 * 28: 5d pop %rbp <-- trapping instruction 29: 5a pop %rdx 2a: 59 pop %rcx 2b: c3 ret 2c: 90 nop 2d: 90 nop 2e: 90 nop 2f: 90 nop 30: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi 37: 8d b4 26 00 00 00 00 lea 0x0(%rsi,%riz,1),%esi