INFO: trying to register non-static key in l2cap_chan

INFO: trying to register non-static key in l2cap_chan_close

Status: auto-obsoleted due to no activity on 2022/12/29 17:19
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+3ae233f384d5b0aaa9e0@syzkaller.appspotmail.com
First crash: 1691d, last: 1691d

Cause bisection: introduced by (bisect log) [release commit]:
commit c470abd4fde40ea6a0846a2beab642a578c0b8cd
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date: Sun Feb 19 22:34:00 2017 +0000

Linux 4.10

Crash: KASAN: use-after-free Read in lock_sock_nested (log)
Repro: syz .config

▶ ▼ Discussions (1)

Title	Replies (including bot)	Last reply
INFO: trying to register non-static key in l2cap_chan_close	0 (1)	2020/08/07 07:16

▶ ▼ Similar bugs (1)

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
linux-4.14	INFO: trying to register non-static key in l2cap_chan_close	syz		error	1	1121d	1689d	0/1	upstream: reported syz repro on 2020/08/09 12:46

▶ ▼ Last patch testing requests (2)


Created	Duration	User	Patch	Repo	Result
2022/12/29 12:31	20m	retest repro		linux-next	OK log
2022/09/20 10:29	10m	retest repro		linux-next	report log

Sample crash report:

INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 0 PID: 6982 Comm: kworker/0:1 Not tainted 5.8.0-rc7-next-20200731-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events l2cap_chan_timeout
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x18f/0x20d lib/dump_stack.c:118
 assign_lock_key kernel/locking/lockdep.c:894 [inline]
 register_lock_class+0x157d/0x1630 kernel/locking/lockdep.c:1206
 __lock_acquire+0xf9/0x5640 kernel/locking/lockdep.c:4303
 lock_acquire+0x1f1/0xad0 kernel/locking/lockdep.c:5003
 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline]
 _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175
 spin_lock_bh include/linux/spinlock.h:359 [inline]
 lock_sock_nested+0x3b/0x110 net/core/sock.c:3048
 l2cap_sock_teardown_cb+0x88/0x400 net/bluetooth/l2cap_sock.c:1520
 l2cap_chan_close+0x2cc/0xb10 net/bluetooth/l2cap_core.c:832
 l2cap_chan_timeout+0x173/0x450 net/bluetooth/l2cap_core.c:436
 process_one_work+0x94c/0x1670 kernel/workqueue.c:2269
 worker_thread+0x64c/0x1120 kernel/workqueue.c:2415
 kthread+0x3b5/0x4a0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2020/08/07 02:46	linux-next	01830e6c042e	1f122f88	.config	console log	report	syz				ci-upstream-linux-next-kasan-gce-root

* ~~Struck through~~ repros no longer work on HEAD.