INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 1 PID: 14603 Comm: syz-executor.1 Not tainted 4.19.190-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:728 [inline] register_lock_class+0xe82/0x11c0 kernel/locking/lockdep.c:754 __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3304 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:152 skb_dequeue+0x1c/0x180 net/core/skbuff.c:2834 skb_queue_purge+0x21/0x30 net/core/skbuff.c:2872 l2cap_chan_del+0x690/0xa50 net/bluetooth/l2cap_core.c:637 l2cap_chan_close+0x1b5/0x950 net/bluetooth/l2cap_core.c:757 l2cap_sock_shutdown+0x339/0xe10 net/bluetooth/l2cap_sock.c:1159 l2cap_sock_release+0x77/0x290 net/bluetooth/l2cap_sock.c:1202 __sock_release+0xcd/0x2a0 net/socket.c:579 sock_close+0x15/0x20 net/socket.c:1140 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x41940b Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007ffd01eaec30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000041940b RDX: ffffffffffffffbc RSI: 0000000008c9f4bf RDI: 0000000000000004 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2f922224 R10: 00007ffd01eaed20 R11: 0000000000000293 R12: 000000000003fee8 R13: 00000000000003e8 R14: 000000000056bf60 R15: 000000000003fea9 Failed to obtain node identity Enabling of bearer rejected, failed to enable media Failed to obtain node identity Enabling of bearer rejected, failed to enable media Failed to obtain node identity Enabling of bearer rejected, failed to enable media Failed to obtain node identity Enabling of bearer rejected, failed to enable media Failed to obtain node identity Enabling of bearer rejected, failed to enable media netlink: 'syz-executor.2': attribute type 10 has an invalid length. bond0: team0 is up - this may be due to an out of date ifenslave netlink: 'syz-executor.2': attribute type 10 has an invalid length. bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state netlink: 'syz-executor.2': attribute type 10 has an invalid length. netlink: 'syz-executor.2': attribute type 10 has an invalid length. device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state bond0: team0 is up - this may be due to an out of date ifenslave netlink: 'syz-executor.2': attribute type 10 has an invalid length. bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state netlink: 'syz-executor.4': attribute type 10 has an invalid length. bond0: team0 is up - this may be due to an out of date ifenslave netlink: 'syz-executor.4': attribute type 10 has an invalid length. bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state netlink: 'syz-executor.2': attribute type 10 has an invalid length. device team0 left promiscuous mode device team_slave_0 left promiscuous mode base_sock_release(0000000073b7c71b) sk=00000000d239d953 base_sock_release(0000000070d81775) sk=000000003fb487ea device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state bond0: team0 is up - this may be due to an out of date ifenslave netlink: 'syz-executor.4': attribute type 10 has an invalid length. device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state bond0: team0 is up - this may be due to an out of date ifenslave netlink: 'syz-executor.2': attribute type 10 has an invalid length. bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state bond0: team0 is up - this may be due to an out of date ifenslave device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state bond0: team0 is up - this may be due to an out of date ifenslave bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered forwarding state MTD: Attempt to mount non-MTD device "/dev/loop5" romfs: VFS: Can't find a romfs filesystem on dev loop5. MTD: Attempt to mount non-MTD device "/dev/loop5" romfs: VFS: Can't find a romfs filesystem on dev loop5. MTD: Attempt to mount non-MTD device "/dev/loop5" romfs: VFS: Can't find a romfs filesystem on dev loop5. MTD: Attempt to mount non-MTD device "/dev/loop5" romfs: VFS: Can't find a romfs filesystem on dev loop5. MTD: Attempt to mount non-MTD device "/dev/loop5" romfs: VFS: Can't find a romfs filesystem on dev loop5. qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). qnx6: wrong signature (magic) in superblock #1. qnx6: unable to read the first superblock qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). qnx6: wrong signature (magic) in superblock #1. qnx6: unable to read the first superblock qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). qnx6: wrong signature (magic) in superblock #1. qnx6: unable to read the first superblock qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). device macvlan0 entered promiscuous mode qnx6: wrong signature (magic) in superblock #1. qnx6: unable to read the first superblock qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue qnx6: wrong signature (magic) in superblock #1. qnx6: unable to read the first superblock EXT4-fs (loop4): re-mounted. Opts: (null)