binder: 12508:12513 transaction failed 29189/-22, size 0-0 line 3013 BTRFS error (device loop4): superblock checksum mismatch BTRFS error (device loop4): open_ctree failed =============================== [ INFO: suspicious RCU usage. ] 4.9.123-g8dd3fc2 #27 Not tainted ------------------------------- net/ipv6/ip6_fib.c:1471 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 0 3 locks held by syz-executor2/12509: #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 #1: (rcu_read_lock){......}, at: [] __fib6_clean_all+0x0/0x220 net/ipv6/ip6_fib.c:1703 #2: (&tb->tb6_lock){++--..}, at: [] __fib6_clean_all+0xe0/0x220 net/ipv6/ip6_fib.c:1717 stack backtrace: CPU: 0 PID: 12509 Comm: syz-executor2 Not tainted 4.9.123-g8dd3fc2 #27 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801a6697318 ffffffff81eb9689 ffff8801d81ee000 0000000000000000 0000000000000002 ffffffff84167c00 ffffed0034cd2eb2 ffff8801a6697348 ffffffff81428611 ffff8801ba611340 ffff8801a6697540 ffff8801ba611340 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] lockdep_rcu_suspicious.cold.48+0x110/0x141 kernel/locking/lockdep.c:4455 [] fib6_del+0x773/0xa20 net/ipv6/ip6_fib.c:1470 [] fib6_clean_node+0x220/0x4c0 net/ipv6/ip6_fib.c:1657 [] fib6_walk_continue+0x3e5/0x640 net/ipv6/ip6_fib.c:1583 [] fib6_walk+0xd9/0x150 net/ipv6/ip6_fib.c:1628 [] fib6_clean_tree+0xd3/0x110 net/ipv6/ip6_fib.c:1702 [] __fib6_clean_all+0xf9/0x220 net/ipv6/ip6_fib.c:1718 [] fib6_clean_all+0x27/0x30 net/ipv6/ip6_fib.c:1729 [] rt6_ifdown+0xa1/0x7f0 net/ipv6/route.c:2716 [] addrconf_ifdown+0xd0/0x10e0 net/ipv6/addrconf.c:3569 [] addrconf_notify+0x7f8/0x2160 net/ipv6/addrconf.c:3493 [] notifier_call_chain+0xb4/0x1d0 kernel/notifier.c:93 [] __raw_notifier_call_chain kernel/notifier.c:394 [inline] [] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 [] call_netdevice_notifiers_info+0x55/0x70 net/core/dev.c:1647 [] call_netdevice_notifiers net/core/dev.c:1663 [inline] [] __dev_notify_flags+0x19d/0x270 net/core/dev.c:6515 [] dev_change_flags+0xf3/0x140 net/core/dev.c:6546 [] devinet_ioctl+0x9d1/0x15d0 net/ipv4/devinet.c:1052 [] inet_ioctl+0x11e/0x1d0 net/ipv4/af_inet.c:908 [] sock_do_ioctl+0x6a/0xb0 net/socket.c:893 [] sock_ioctl+0x346/0x3e0 net/socket.c:979 [] vfs_ioctl fs/ioctl.c:43 [inline] [] file_ioctl fs/ioctl.c:493 [inline] [] do_vfs_ioctl+0x1ac/0x11a0 fs/ioctl.c:677 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors 9pnet: Insufficient options for proto=fd FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd FAT-fs (loop4): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem FAT-fs (loop6): bogus number of reserved sectors FAT-fs (loop6): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd FAT-fs (loop4): bogus number of reserved sectors FAT-fs (loop4): Can't find a valid FAT filesystem 9pnet: Insufficient options for proto=fd