BUG: MAX_LOCKDEP_CHAINS too low! netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. turning off the locking correctness validator. CPU: 1 PID: 16976 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 add_chain_cache kernel/locking/lockdep.c:2303 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:2415 [inline] validate_chain kernel/locking/lockdep.c:2435 [inline] __lock_acquire.cold+0x19a/0x97c kernel/locking/lockdep.c:3491 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:160 __debug_check_no_obj_freed lib/debugobjects.c:738 [inline] debug_check_no_obj_freed+0x135/0x680 lib/debugobjects.c:776 free_pages_prepare mm/page_alloc.c:1064 [inline] __free_pages_ok+0x215/0xeb0 mm/page_alloc.c:1262 free_thread_stack kernel/fork.c:262 [inline] release_task_stack kernel/fork.c:347 [inline] put_task_stack+0xa0/0x1c0 kernel/fork.c:358 finish_task_switch+0x42c/0x610 kernel/sched/core.c:2692 context_switch kernel/sched/core.c:2811 [inline] __schedule+0x893/0x1de0 kernel/sched/core.c:3384 preempt_schedule_irq+0xb0/0x140 kernel/sched/core.c:3611 retint_kernel+0x1b/0x2d RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:779 [inline] RIP: 0010:lock_acquire+0x1ec/0x3f0 kernel/locking/lockdep.c:4001 RSP: 0018:ffff8880564b7bf8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff11e1259 RBX: ffff8880a94da440 RCX: 0000000000003ca3 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000286 RBP: ffffffff88fdcd20 R08: ffffffff8b9adfd8 R09: 000000000004005e R10: ffff8880a94dacf0 R11: ffff8880a94da440 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 down_write+0x34/0x90 kernel/locking/rwsem.c:54 unregister_shrinker mm/vmscan.c:302 [inline] unregister_shrinker+0x51/0x210 mm/vmscan.c:298 deactivate_locked_super+0x48/0xd0 fs/super.c:318 v9fs_mount+0x590/0x860 fs/9p/vfs_super.c:214 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2549 [inline] do_mount+0xe53/0x2a00 fs/namespace.c:2879 SYSC_mount fs/namespace.c:3095 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3072 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x4665d9 RSP: 002b:00007f2706b34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000000feffff RBP: 00000000004bfcb9 R08: 0000000020000200 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffe65c67a6f R14: 00007f2706b34300 R15: 0000000000022000 rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. rtc_cmos 00:00: Alarms can be up to one day in the future rtc rtc0: __rtc_set_alarm: err=-22 rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc rtc0: __rtc_set_alarm: err=-22 rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future rtc_cmos 00:00: Alarms can be up to one day in the future divide error: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 17169 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88809e2a4140 task.stack: ffff888095360000 RIP: 0010:fbcon_init+0xcb4/0x1cc0 drivers/video/fbdev/core/fbcon.c:1065 RSP: 0018:ffff8880953677e0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888238fcb340 RCX: ffffc9000c1fe000 RDX: 0000000000000000 RSI: ffff8880aa7ae834 RDI: ffff888238fcb4f8 RBP: ffff8880aa7ae480 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: ffff88809e2a4140 R12: ffff8880b09ee5c0 R13: 0000000000000000 R14: ffff8880aa7ae7b4 R15: 0000000000000000 FS: 00007f13f4ae2700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000519c30 CR3: 00000000525ad000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: visual_init+0x332/0x5e0 drivers/tty/vt/vt.c:746 vc_allocate+0x2c5/0x640 drivers/tty/vt/vt.c:802 con_install+0x4d/0x450 drivers/tty/vt/vt.c:2899 tty_driver_install_tty drivers/tty/tty_io.c:1225 [inline] tty_init_dev.part.0+0x99/0x400 drivers/tty/tty_io.c:1338 tty_init_dev drivers/tty/tty_io.c:1328 [inline] tty_open_by_driver drivers/tty/tty_io.c:1973 [inline] tty_open+0x669/0x8b0 drivers/tty/tty_io.c:2021 chrdev_open+0x23c/0x6d0 fs/char_dev.c:423 do_dentry_open+0x44b/0xec0 fs/open.c:777 vfs_open+0x105/0x220 fs/open.c:888 do_last fs/namei.c:3428 [inline] path_openat+0x628/0x2970 fs/namei.c:3569 do_filp_open+0x179/0x3c0 fs/namei.c:3603 do_sys_open+0x296/0x410 fs/open.c:1081 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x4196c4 RSP: 002b:00007f13f4ae1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004196c4 RDX: 0000000000000002 RSI: 00007f13f4ae1d60 RDI: 00000000ffffff9c RBP: 00007f13f4ae1d60 R08: 0000000000000000 R09: 000000000000000e R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 R13: 00007ffc4ebe0f1f R14: 00007f13f4ae2300 R15: 0000000000022000 Code: 54 24 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 8d 0d 00 00 31 d2 44 89 f8 48 8b 74 24 38 b5 b0 03 00 00 48 89 f2 48 c1 ea 03 89 44 24 30 48 b8 00 00 RIP: fbcon_init+0xcb4/0x1cc0 drivers/video/fbdev/core/fbcon.c:1065 RSP: ffff8880953677e0 ---[ end trace 9c440a46476d00b7 ]---