INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 1 PID: 10436 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768
 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
 flush_work+0xad/0x770 kernel/workqueue.c:2890
 __cancel_work_timer+0x321/0x460 kernel/workqueue.c:2965
 smc_close_active+0x7e2/0xbb0 net/smc/smc_close.c:207
 smc_release+0x3e1/0x5d0 net/smc/af_smc.c:131
 __sock_release+0xcd/0x2b0 net/socket.c:602
 sock_close+0x15/0x20 net/socket.c:1139
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7fbbe9f8efab
RSP: 002b:00007ffdff4f5860 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fbbe9f8efab
RDX: 0000000000000000 RSI: 0000001b2ea259e4 RDI: 0000000000000005
RBP: 00007fbbea0fe980 R08: 0000000000000000 R09: 00000000855a7417
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000051584
R13: 00007ffdff4f5960 R14: 00007fbbea0fd120 R15: 0000000000000fd2
REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
PF_BRIDGE: RTM_SETLINK with unknown ifindex
REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop3): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop3): checking transaction log (loop3)
REISERFS (device loop3): Using r5 hash to sort names
REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
batman_adv: Cannot find parent device
device gretap1 entered promiscuous mode
audit: type=1800 audit(1677694123.780:4): pid=10929 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=3 res=0
attempt to access beyond end of device
REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
loop2: rw=2049, want=2064, limit=2048
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): checking transaction log (loop5)
BTRFS info (device loop3): enabling inode map caching
BTRFS warning (device loop3): excessive commit interval 622039222
REISERFS (device loop5): Using r5 hash to sort names
BTRFS info (device loop3): force zlib compression
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
BTRFS info (device loop3): using free space tree
BTRFS info (device loop3): has skinny extents
audit: type=1804 audit(1677694124.420:5): pid=10928 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir1974726452/syzkaller.6X2vAK/57/bus" dev="sda1" ino=14043 res=1
REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop5): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop2): using ordered data mode
REISERFS (device loop5): checking transaction log (loop5)
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
BTRFS info (device loop3): enabling inode map caching
BTRFS warning (device loop3): excessive commit interval 622039222
BTRFS info (device loop3): force zlib compression
BTRFS info (device loop3): using free space tree
BTRFS info (device loop3): has skinny extents
REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop5): using ordered data mode
REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
reiserfs: using flush barriers
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
REISERFS (device loop5): using ordered data mode
REISERFS (device loop2): using ordered data mode
reiserfs: using flush barriers
reiserfs: using flush barriers
REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
REISERFS (device loop2): checking transaction log (loop2)
REISERFS (device loop5): checking transaction log (loop5)
REISERFS (device loop2): Using r5 hash to sort names
REISERFS (device loop5): Using r5 hash to sort names
REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
l2tp_core: tunl 3: sockfd_lookup(fd=4) returned -88
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: empty MTD device detected
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11263
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11374
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11409
ubi0: detaching mtd0
ubi0: mtd0 is detached
EXT4-fs (loop5): Ignoring removed nobh option
EXT4-fs (loop5): quotafile must be on filesystem root
netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'.
ubi0: attaching mtd0
ubi0: scanning is finished
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
device geneve2 entered promiscuous mode
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11470
ubi: mtd0 is already attached to ubi0
netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'.
EXT4-fs (loop5): Ignoring removed nobh option
EXT4-fs (loop5): quotafile must be on filesystem root
ubi: mtd0 is already attached to ubi0
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
ubi: mtd0 is already attached to ubi0
ubi: mtd0 is already attached to ubi0
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
EXT4-fs (loop5): Ignoring removed nobh option
EXT4-fs (loop5): quotafile must be on filesystem root
ubi: mtd0 is already attached to ubi0
print_req_error: I/O error, dev loop5, sector 0
Buffer I/O error on dev loop5, logical block 0, async page read
print_req_error: I/O error, dev loop5, sector 4
Buffer I/O error on dev loop5, logical block 2, async page read
print_req_error: I/O error, dev loop5, sector 6
Buffer I/O error on dev loop5, logical block 3, async page read
netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
ubi: mtd0 is already attached to ubi0
ubi0: detaching mtd0
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
EXT4-fs (loop5): Ignoring removed nobh option
ubi0: mtd0 is detached
EXT4-fs (loop5): quotafile must be on filesystem root
netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'.
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11606
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11662
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11700
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698
ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
ubi0: background thread "ubi_bgt0d" started, PID 11726
ubi0: detaching mtd0
ubi0: mtd0 is detached
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
ubi0: VID header offset: 64 (aligned 64), data offset: 128
ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3471475698