syzbot


INFO: trying to register non-static key in ieee802154_get_llsec_params

Status: auto-closed as invalid on 2021/08/05 05:48
Reported-by: syzbot+e7619545f676b3ded1e6@syzkaller.appspotmail.com
First crash: 1383d, last: 1345d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 INFO: trying to register non-static key in ieee802154_get_llsec_params C done 8 1339d 1363d 1/1 fixed on 2021/05/13 13:21

Sample crash report:
INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 0 PID: 13054 Comm: syz-executor.3 Not tainted 4.19.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 assign_lock_key kernel/locking/lockdep.c:727 [inline]
 register_lock_class+0xe76/0x11c0 kernel/locking/lockdep.c:753
 __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3303
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3907
 __mutex_lock_common kernel/locking/mutex.c:925 [inline]
 __mutex_lock+0xd7/0x1260 kernel/locking/mutex.c:1072
 ieee802154_get_llsec_params+0x3f/0x70 net/mac802154/cfg.c:327
 rdev_get_llsec_params net/ieee802154/rdev-ops.h:241 [inline]
 nl802154_get_llsec_params+0xce/0x390 net/ieee802154/nl802154.c:761
 nl802154_send_iface+0x83d/0x9e0 net/ieee802154/nl802154.c:839
 nl802154_dump_interface+0x294/0x490 net/ieee802154/nl802154.c:876
 genl_lock_dumpit+0x60/0x90 net/netlink/genetlink.c:482
 netlink_dump+0x3cf/0xc10 net/netlink/af_netlink.c:2234
 __netlink_dump_start+0x4e9/0x6f0 net/netlink/af_netlink.c:2330
 genl_family_rcv_msg+0xa76/0xc40 net/netlink/genetlink.c:550
 genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
 sock_sendmsg_nosec net/socket.c:622 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:632
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
 __sys_sendmsg net/socket.c:2153 [inline]
 __do_sys_sendmsg net/socket.c:2162 [inline]
 __se_sys_sendmsg net/socket.c:2160 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x466459
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5c629bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004
RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffc93ed85ef R14: 00007f5c629bf300 R15: 0000000000022000
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument

netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument

netlink: 'syz-executor.0': attribute type 1 has an invalid length.
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
overlayfs: failed to resolve './file0': -2
overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready
team0: Port device veth5 added
tmpfs: Bad value 'prefer=relative' for mount option 'mpol'
tmpfs: Bad value 'prefer=relative' for mount option 'mpol'
PF_BRIDGE: br_mdb_parse() with invalid entry
PF_BRIDGE: br_mdb_parse() with invalid entry
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
netlink: 'syz-executor.4': attribute type 1 has an invalid length.
nla_parse: 3 callbacks suppressed
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
IPv6: ADDRCONF(NETDEV_CHANGE): gtp2: link becomes ready
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
IPv6: ADDRCONF(NETDEV_UP): veth7: link is not ready
team0: Port device veth7 added
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 512 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 1024 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 2048 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 4096 failed
UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 512 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 1024 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 2048 failed
UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 4096 failed
UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/04/07 05:47 linux-4.19.y 2034d6f0838e 6a81331a .config console log report info ci2-linux-4-19 INFO: trying to register non-static key in ieee802154_get_llsec_params
2021/03/22 04:47 linux-4.19.y 125222814e7b bea32f74 .config console log report info ci2-linux-4-19 INFO: trying to register non-static key in ieee802154_get_llsec_params
2021/02/28 20:58 linux-4.19.y 2d19be4653f5 4c37c133 .config console log report info ci2-linux-4-19 INFO: trying to register non-static key in ieee802154_get_llsec_params
* Struck through repros no longer work on HEAD.