INFO: trying to register non-static key in stats_request (2)

Status: upstream: reported on 2026/08/22 00:11
Subsystems: virt
Labels: prio:high
[Documentation on labels]
Reported-by: syzbot+13df72e0dc4be5c62215@syzkaller.appspotmail.com
First crash: 51d, last: 9d13h
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
11dadfb0 repro-c 💥 INFO: trying to register non-static key in stats_request (2) 2026/08/25 09:53 2026/08/25 09:53 2026/08/25 10:28 614e416a
bbdecde3 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ✅ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ✅ ❓ INFO: trying to register non-static key in stats_request (2) 2026/08/19 01:51 2026/08/19 01:51 2026/08/19 02:06 1e72964b
▶ ▼ Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [virt?] INFO: trying to register non-static key in stats_request (2) 1 (2) 2026/08/24 12:57
▶ ▼ Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: trying to register non-static key in stats_request virt -1 2 689d 687d 0/29 auto-obsoleted due to no activity on 2025/02/25 02:00

Sample crash report:
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 assign_lock_key kernel/locking/lockdep.c:1028 [inline]
 register_lock_class+0x79b/0x7b0 kernel/locking/lockdep.c:1343
 __lock_acquire+0x25d/0x1f40 kernel/locking/lockdep.c:5162
 lock_acquire kernel/locking/lockdep.c:5942 [inline]
 lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:155 [inline]
 _raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:181
 start_wakeup_event drivers/virtio/virtio_balloon.c:151 [inline]
 stats_request+0xdd/0x230 drivers/virtio/virtio_balloon.c:438
 vring_interrupt+0x2ef/0x660 drivers/virtio/virtio_ring.c:3335
 vp_vring_interrupt+0x90/0x110 drivers/virtio/virtio_pci_common.c:92
 vp_interrupt+0x8b/0x180 drivers/virtio/virtio_pci_common.c:123
 __handle_irq_event_percpu+0x232/0x880 kernel/irq/handle.c:209
 handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
 handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:263
 handle_fasteoi_irq+0x323/0xb60 kernel/irq/chip.c:768
 generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
 handle_irq arch/x86/kernel/irq.c:209 [inline]
 call_irq_handler arch/x86/kernel/irq.c:265 [inline]
 __common_interrupt+0xd8/0x2f0 arch/x86/kernel/irq.c:280
 common_interrupt+0xb9/0xe0 arch/x86/kernel/irq.c:273
 </IRQ>
 <TASK>
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947
Code: 05 0f d3 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e ab 5e 0f 0f 82 c9 02 00 00 8b 35 9e dc 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad d2 a5 12 0f 85 09 03 00 00 48 83 c4
RSP: 0000:ffffc90000067868 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8e36ba36 RDI: ffffffff8c623f80
RBP: ffffffff8ef4ade8 R08: 000000000001281f R09: 0000000000000001
R10: 0000000000000200 R11: 000000000000761b R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
 down_write+0x8b/0x1f0 kernel/locking/rwsem.c:1631
 __blocking_notifier_chain_register kernel/notifier.c:263 [inline]
 blocking_notifier_chain_register+0x60/0xd0 kernel/notifier.c:282
 virtballoon_probe+0xa06/0x14c0 drivers/virtio/virtio_balloon.c:996
 virtio_dev_probe+0x6a2/0xbe0 drivers/virtio/virtio.c:347
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __driver_attach+0x21f/0x5b0 drivers/base/dd.c:1292
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:763
 driver_register+0x1e2/0x360 drivers/base/driver.c:174
 do_one_initcall+0x11c/0x6f0 init/main.c:1362
 do_initcall_level init/main.c:1424 [inline]
 do_initcalls init/main.c:1440 [inline]
 do_basic_setup init/main.c:1460 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1675
 kernel_init+0x21/0x1e0 init/main.c:1565
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	05 0f d3 a5 12       	add    $0x12a5d30f,%eax
   5:	83 f8 07             	cmp    $0x7,%eax
   8:	0f 87 da 00 00 00    	ja     0xe8
   e:	48 0f a3 05 1e ab 5e 	bt     %rax,0xf5eab1e(%rip)        # 0xf5eab34
  15:	0f
  16:	0f 82 c9 02 00 00    	jb     0x2e5
  1c:	8b 35 9e dc 5e 0f    	mov    0xf5edc9e(%rip),%esi        # 0xf5edcc0
  22:	85 f6                	test   %esi,%esi
  24:	0f 85 c7 00 00 00    	jne    0xf1
* 2a:	48 8b 44 24 30       	mov    0x30(%rsp),%rax <-- trapping instruction
  2f:	65 48 2b 05 ad d2 a5 	sub    %gs:0x12a5d2ad(%rip),%rax        # 0x12a5d2e4
  36:	12
  37:	0f 85 09 03 00 00    	jne    0x346
  3d:	48                   	rex.W
  3e:	83                   	.byte 0x83
  3f:	c4                   	.byte 0xc4

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/27 23:58 upstream d266640c6c76 a3c7249d .config console log report [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto INFO: trying to register non-static key in stats_request
2026/08/17 11:11 upstream 8d3ae59288f1 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: trying to register non-static key in stats_request
* Struck through repros no longer work on HEAD.