INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 9596 Comm: syz-executor.0 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 flush_work+0xad/0x770 kernel/workqueue.c:2890 __cancel_work_timer+0x321/0x460 kernel/workqueue.c:2965 smc_close_active+0x7e2/0xbb0 net/smc/smc_close.c:207 smc_release+0x3e1/0x5d0 net/smc/af_smc.c:131 __sock_release+0xcd/0x2b0 net/socket.c:602 sock_close+0x15/0x20 net/socket.c:1139 __fput+0x25f/0x7a0 fs/file_table.c:210 task_work_run+0x11f/0x190 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:191 [inline] exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline] syscall_return_slowpath arch/x86/entry/common.c:270 [inline] do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f523468ffab RSP: 002b:00007fff21d054c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f523468ffab RDX: 00007f52342522b8 RSI: ffffffffffffffff RDI: 0000000000000003 RBP: 00007f52347ff980 R08: 0000000000000000 R09: 00007f5234252000 R10: 00007f52342522c0 R11: 0000000000000293 R12: 0000000000047254 R13: 00007fff21d055c0 R14: 00007f52347fdf80 R15: 0000000000000032 XFS (loop1): Superblock has unknown read-only compatible features (0x8) enabled. XFS (loop1): Attempted to mount read-only compatible filesystem read-write. XFS (loop1): Filesystem can only be safely mounted read only. XFS (loop1): SB validate failed with error -22. audit: type=1800 audit(1677892823.826:2): pid=9812 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=13933 res=0 netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. team0: Device veth0_vlan is up. Set it down before adding it as a team port PM: Marking nosave pages: [mem 0x00000000-0x00000fff] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff] PM: Basic memory bitmaps created PM: Basic memory bitmaps freed syz-executor.4 (9903) used greatest stack depth: 25032 bytes left netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. team0: Port device ipvlan0 added team0: Port device ipvlan0 removed netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. team0: Device veth1_macvtap is up. Set it down before adding it as a team port team0: Device geneve1 is up. Set it down before adding it as a team port netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 220 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal REISERFS (device loop0): using ordered data mode reiserfs: using flush barriers REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready REISERFS (device loop0): checking transaction log (loop0) 8021q: adding VLAN 0 to HW filter on device bond1 team0: Port device bond1 added IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready REISERFS (device loop0): Using r5 hash to sort names 8021q: adding VLAN 0 to HW filter on device bond1 reiserfs: enabling write barrier flush mode REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. team0: Port device bond1 added overlayfs: fs on './' does not support file handles, falling back to index=off. team0: Port device bond1 removed bond1 (unregistering): Released all slaves overlayfs: upper fs needs to support d_type. overlayfs: upper fs does not support tmpfile. overlayfs: upper fs does not support xattr. team0: Port device bond1 removed bond1 (unregistering): Released all slaves IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready 8021q: adding VLAN 0 to HW filter on device bond1 REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal REISERFS (device loop0): using ordered data mode team0: Port device bond1 added reiserfs: using flush barriers IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 8021q: adding VLAN 0 to HW filter on device bond1 team0: Port device bond1 added team0: Port device bond1 removed bond1 (unregistering): Released all slaves REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using r5 hash to sort names team0: Port device bond1 removed bond1 (unregistering): Released all slaves reiserfs: enabling write barrier flush mode REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. overlayfs: fs on './' does not support file handles, falling back to index=off. overlayfs: upper fs needs to support d_type. overlayfs: upper fs does not support tmpfile. overlayfs: upper fs does not support xattr. REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal REISERFS (device loop0): using ordered data mode reiserfs: using flush barriers REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using r5 hash to sort names reiserfs: enabling write barrier flush mode REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. overlayfs: fs on './' does not support file handles, falling back to index=off. overlayfs: upper fs needs to support d_type. overlayfs: upper fs does not support tmpfile. overlayfs: upper fs does not support xattr. REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal REISERFS (device loop0): using ordered data mode reiserfs: using flush barriers REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 REISERFS (device loop0): checking transaction log (loop0) REISERFS (device loop0): Using r5 hash to sort names reiserfs: enabling write barrier flush mode REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. overlayfs: fs on './' does not support file handles, falling back to index=off. overlayfs: upper fs needs to support d_type. overlayfs: upper fs does not support tmpfile. overlayfs: upper fs does not support xattr. block nbd3: NBD_DISCONNECT block nbd3: NBD_DISCONNECT block nbd3: NBD_DISCONNECT ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A block nbd3: NBD_DISCONNECT ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A ISO 9660 Extensions: Microsoft Joliet Level 3 ISO 9660 Extensions: RRIP_1991A Unsupported NM flag settings (128) FAT-fs (loop4): Directory bread(block 64) failed FAT-fs (loop4): Directory bread(block 65) failed FAT-fs (loop4): Directory bread(block 66) failed FAT-fs (loop4): Directory bread(block 67) failed FAT-fs (loop4): Directory bread(block 68) failed FAT-fs (loop4): Directory bread(block 69) failed FAT-fs (loop4): Directory bread(block 70) failed FAT-fs (loop4): Directory bread(block 71) failed FAT-fs (loop4): Directory bread(block 72) failed FAT-fs (loop4): Directory bread(block 73) failed attempt to access beyond end of device loop4: rw=0, want=1164, limit=256 attempt to access beyond end of device loop4: rw=0, want=1164, limit=256 audit: type=1800 audit(1677892828.507:3): pid=10851 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.4" name="file0" dev="loop4" ino=3 res=0 L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. FAT-fs (loop4): Directory bread(block 64) failed FAT-fs (loop4): Directory bread(block 65) failed FAT-fs (loop4): Directory bread(block 66) failed FAT-fs (loop4): Directory bread(block 67) failed FAT-fs (loop4): Directory bread(block 68) failed FAT-fs (loop4): Directory bread(block 69) failed FAT-fs (loop4): Directory bread(block 70) failed FAT-fs (loop4): Directory bread(block 71) failed FAT-fs (loop4): Directory bread(block 72) failed FAT-fs (loop4): Directory bread(block 73) failed attempt to access beyond end of device loop4: rw=0, want=1164, limit=256 attempt to access beyond end of device loop4: rw=0, want=1164, limit=256 audit: type=1800 audit(1677892829.317:4): pid=10912 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed" comm="syz-executor.4" name="file0" dev="loop4" ino=4 res=0