ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4103851111 ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 ubi0: background thread "ubi_bgt0d" started, PID 11026 ubi0: detaching mtd0 ubi0: mtd0 is detached INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 10958 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 flush_work+0xad/0x770 kernel/workqueue.c:2890 __cancel_work_timer+0x321/0x460 kernel/workqueue.c:2965 smc_close_active+0x7e2/0xbb0 net/smc/smc_close.c:207 smc_release+0x3e1/0x5d0 net/smc/af_smc.c:131 __sock_release+0xcd/0x2b0 net/socket.c:602 sock_close+0x15/0x20 net/socket.c:1139 __fput+0x25f/0x7a0 fs/file_table.c:210 task_work_run+0x11f/0x190 kernel/task_work.c:113 get_signal+0x18a3/0x1ca0 kernel/signal.c:2223 do_signal+0x7c/0x1550 arch/x86/kernel/signal.c:792 exit_to_usermode_loop+0x160/0x200 arch/x86/entry/common.c:160 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7fa2eb6b80f9 RSP: 002b:00007fa2e9bc7168 EFLAGS: 00000246 ORIG_RAX: 000000000000010e RAX: fffffffffffffdfe RBX: 00007fa2eb7d81f0 RCX: 00007fa2eb6b80f9 RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000040 RBP: 00007fa2eb713ae9 R08: 00000000200001c0 R09: 0000000000000000 R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc9513e11f R14: 00007fa2e9bc7300 R15: 0000000000022000 ubi0: attaching mtd0 ubi0: scanning is finished ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 ubi0: VID header offset: 64 (aligned 64), data offset: 128 ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4103851111 ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 ubi0: background thread "ubi_bgt0d" started, PID 11071 ubi0: detaching mtd0 ubi0: mtd0 is detached print_req_error: I/O error, dev loop2, sector 0 print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 0 Buffer I/O error on dev loop2, logical block 0, async page read print_req_error: I/O error, dev loop2, sector 24 Buffer I/O error on dev loop2, logical block 3, async page read device bond2 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.2'. device ‰ entered promiscuous mode ubi0: attaching mtd0 ubi0: scanning is finished ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 ubi0: VID header offset: 64 (aligned 64), data offset: 128 ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4103851111 ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 ubi0: detaching mtd0 ubi0: mtd0 is detached ubi0: attaching mtd0 ubi0: scanning is finished device bond3 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready 8021q: adding VLAN 0 to HW filter on device bond3 netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.2'. ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 ubi0: VID header offset: 64 (aligned 64), data offset: 128 ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4103851111 ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 ubi0: detaching mtd0 ubi0: mtd0 is detached device bond4 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond4: link is not ready 8021q: adding VLAN 0 to HW filter on device bond4 netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.5'. device ‰ entered promiscuous mode netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.1'. kauditd_printk_skb: 58 callbacks suppressed audit: type=1804 audit(1677686179.880:22): pid=11330 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/47/bus" dev="sda1" ino=14157 res=1 audit: type=1800 audit(1677686179.880:23): pid=11330 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14157 res=0 audit: type=1804 audit(1677686179.940:24): pid=11331 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/47/bus" dev="sda1" ino=14157 res=1 device bond1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready 8021q: adding VLAN 0 to HW filter on device bond1 audit: type=1804 audit(1677686180.790:25): pid=11415 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/48/bus" dev="sda1" ino=14159 res=1 audit: type=1800 audit(1677686180.790:26): pid=11415 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14159 res=0 audit: type=1804 audit(1677686181.220:27): pid=11413 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/48/bus" dev="sda1" ino=14159 res=1 device bond2 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 nla_parse: 2 callbacks suppressed netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 2168 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1804 audit(1677686181.670:28): pid=11451 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/49/bus" dev="sda1" ino=14139 res=1 audit: type=1800 audit(1677686181.670:29): pid=11451 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14139 res=0 audit: type=1804 audit(1677686181.730:30): pid=11452 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir3976950665/syzkaller.OzJPXw/49/bus" dev="sda1" ino=14139 res=1 audit: type=1804 audit(1677686182.040:31): pid=11462 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir2323337212/syzkaller.Q7JMzN/58/bus" dev="sda1" ino=14164 res=1 device bond3 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready 8021q: adding VLAN 0 to HW filter on device bond3 unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 kauditd_printk_skb: 14 callbacks suppressed audit: type=1804 audit(1677686185.680:46): pid=11573 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir2577533773/syzkaller.xfgylE/62/bus" dev="sda1" ino=14178 res=1 audit: type=1800 audit(1677686185.680:47): pid=11573 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=14178 res=0 audit: type=1804 audit(1677686185.750:48): pid=11573 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir2577533773/syzkaller.xfgylE/62/bus" dev="sda1" ino=14178 res=1 audit: type=1804 audit(1677686186.080:49): pid=11607 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir2323337212/syzkaller.Q7JMzN/60/bus" dev="sda1" ino=14156 res=1 audit: type=1800 audit(1677686186.080:50): pid=11607 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=14156 res=0 audit: type=1804 audit(1677686186.140:51): pid=11608 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir2323337212/syzkaller.Q7JMzN/60/bus" dev="sda1" ino=14156 res=1 BTRFS info (device loop5): enabling inode map caching BTRFS info (device loop5): trying to use backup root at mount time BTRFS info (device loop5): use zlib compression BTRFS info (device loop5): enabling ssd optimizations BTRFS info (device loop5): using spread ssd allocation scheme BTRFS info (device loop5): using free space tree BTRFS info (device loop5): has skinny extents