syzbot


INFO: trying to register non-static key in sco_sock_timeout

Status: auto-closed as invalid on 2022/08/22 03:23
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+c893cac8686270f25523@syzkaller.appspotmail.com
First crash: 980d, last: 929d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] INFO: trying to register non-static key in sco_sock_timeout 0 (1) 2022/03/08 16:31
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: trying to register non-static key in sco_sock_timeout 3 851d 902d 0/1 auto-obsoleted due to no activity on 2022/11/08 15:04
upstream INFO: trying to register non-static key in sco_sock_timeout (2) bluetooth 5 195d 361d 0/28 auto-obsoleted due to no activity on 2024/08/05 10:41
linux-4.14 INFO: trying to register non-static key in sco_sock_timeout 1 955d 955d 0/1 auto-closed as invalid on 2022/07/27 14:41

Sample crash report:
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 PID: 3721 Comm: kworker/1:10 Not tainted 5.18.0-rc3-syzkaller-00218-g13bc32bad705 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events sco_sock_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 assign_lock_key kernel/locking/lockdep.c:949 [inline]
 register_lock_class+0xf04/0x11b0 kernel/locking/lockdep.c:1262
 __lock_acquire+0x10a/0x56c0 kernel/locking/lockdep.c:4908
 lock_acquire kernel/locking/lockdep.c:5641 [inline]
 lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5606
 lock_sock_nested+0x36/0xf0 net/core/sock.c:3312
 lock_sock include/net/sock.h:1682 [inline]
 sco_sock_timeout+0xd2/0x290 net/bluetooth/sco.c:97
 process_one_work+0x996/0x1610 kernel/workqueue.c:2289
 worker_thread+0x665/0x1080 kernel/workqueue.c:2436
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
================================================================================
UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9
index 16382 is out of range for type 'long unsigned int [8]'
CPU: 1 PID: 3721 Comm: kworker/1:10 Not tainted 5.18.0-rc3-syzkaller-00218-g13bc32bad705 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: events sco_sock_timeout
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 ubsan_epilogue+0xb/0x50 lib/ubsan.c:151
 __ubsan_handle_out_of_bounds.cold+0x62/0x6c lib/ubsan.c:283
 decode_tail kernel/locking/qspinlock.c:130 [inline]
 __pv_queued_spin_lock_slowpath+0xa3d/0xb40 kernel/locking/qspinlock.c:468
 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:591 [inline]
 queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline]
 queued_spin_lock include/asm-generic/qspinlock.h:85 [inline]
 do_raw_spin_lock+0x200/0x2a0 kernel/locking/spinlock_debug.c:115
 spin_lock_bh include/linux/spinlock.h:354 [inline]
 lock_sock_nested+0x5b/0xf0 net/core/sock.c:3315
 lock_sock include/net/sock.h:1682 [inline]
 sco_sock_timeout+0xd2/0x290 net/bluetooth/sco.c:97
 process_one_work+0x996/0x1610 kernel/workqueue.c:2289
 worker_thread+0x665/0x1080 kernel/workqueue.c:2436
 kthread+0x2e9/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298
 </TASK>
================================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/04/24 03:22 upstream 13bc32bad705 131df97d .config console log report info ci-upstream-kasan-gce-root INFO: trying to register non-static key in sco_sock_timeout
2022/03/04 16:27 linux-next 91265a6da44d 45a13a73 .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: trying to register non-static key in sco_sock_timeout
* Struck through repros no longer work on HEAD.