syzbot
INFO: trying to register non-static key in stats_request (2)
Status:
upstream: reported on 2026/08/22 00:11
Subsystems:
virt
Labels:
prio:high
[Documentation on labels]
Reported-by: syzbot+13df72e0dc4be5c62215@syzkaller.appspotmail.com
First crash: 51d, last: 9d19h
Sample crash report:
INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
<IRQ>
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
assign_lock_key kernel/locking/lockdep.c:1028 [inline]
register_lock_class+0x79b/0x7b0 kernel/locking/lockdep.c:1343
__lock_acquire+0x25d/0x1f40 kernel/locking/lockdep.c:5162
lock_acquire kernel/locking/lockdep.c:5942 [inline]
lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5899
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:155 [inline]
_raw_spin_lock_irqsave+0x3a/0x60 kernel/locking/spinlock.c:181
start_wakeup_event drivers/virtio/virtio_balloon.c:151 [inline]
stats_request+0xdd/0x230 drivers/virtio/virtio_balloon.c:438
vring_interrupt+0x2ef/0x660 drivers/virtio/virtio_ring.c:3335
vp_vring_interrupt+0x90/0x110 drivers/virtio/virtio_pci_common.c:92
vp_interrupt+0x8b/0x180 drivers/virtio/virtio_pci_common.c:123
__handle_irq_event_percpu+0x232/0x880 kernel/irq/handle.c:209
handle_irq_event_percpu kernel/irq/handle.c:246 [inline]
handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:263
handle_fasteoi_irq+0x323/0xb60 kernel/irq/chip.c:768
generic_handle_irq_desc include/linux/irqdesc.h:188 [inline]
handle_irq arch/x86/kernel/irq.c:209 [inline]
call_irq_handler arch/x86/kernel/irq.c:265 [inline]
__common_interrupt+0xd8/0x2f0 arch/x86/kernel/irq.c:280
common_interrupt+0xb9/0xe0 arch/x86/kernel/irq.c:273
</IRQ>
<TASK>
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:665
RIP: 0010:lock_acquire+0x5e/0x380 kernel/locking/lockdep.c:5947
Code: 05 0f d3 a5 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e ab 5e 0f 0f 82 c9 02 00 00 8b 35 9e dc 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad d2 a5 12 0f 85 09 03 00 00 48 83 c4
RSP: 0000:ffffc90000067868 EFLAGS: 00000206
RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000000 RSI: ffffffff8e36ba36 RDI: ffffffff8c623f80
RBP: ffffffff8ef4ade8 R08: 000000000001281f R09: 0000000000000001
R10: 0000000000000200 R11: 000000000000761b R12: 0000000000000000
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
down_write+0x8b/0x1f0 kernel/locking/rwsem.c:1631
__blocking_notifier_chain_register kernel/notifier.c:263 [inline]
blocking_notifier_chain_register+0x60/0xd0 kernel/notifier.c:282
virtballoon_probe+0xa06/0x14c0 drivers/virtio/virtio_balloon.c:996
virtio_dev_probe+0x6a2/0xbe0 drivers/virtio/virtio.c:347
call_driver_probe drivers/base/dd.c:628 [inline]
really_probe+0x241/0xa60 drivers/base/dd.c:706
__driver_probe_device+0x210/0x460 drivers/base/dd.c:868
driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
__driver_attach+0x21f/0x5b0 drivers/base/dd.c:1292
bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
bus_add_driver+0x305/0x5b0 drivers/base/bus.c:763
driver_register+0x1e2/0x360 drivers/base/driver.c:174
do_one_initcall+0x11c/0x6f0 init/main.c:1362
do_initcall_level init/main.c:1424 [inline]
do_initcalls init/main.c:1440 [inline]
do_basic_setup init/main.c:1460 [inline]
kernel_init_freeable+0x6ea/0x7b0 init/main.c:1675
kernel_init+0x21/0x1e0 init/main.c:1565
ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
</TASK>
----------------
Code disassembly (best guess):
0: 05 0f d3 a5 12 add $0x12a5d30f,%eax
5: 83 f8 07 cmp $0x7,%eax
8: 0f 87 da 00 00 00 ja 0xe8
e: 48 0f a3 05 1e ab 5e bt %rax,0xf5eab1e(%rip) # 0xf5eab34
15: 0f
16: 0f 82 c9 02 00 00 jb 0x2e5
1c: 8b 35 9e dc 5e 0f mov 0xf5edc9e(%rip),%esi # 0xf5edcc0
22: 85 f6 test %esi,%esi
24: 0f 85 c7 00 00 00 jne 0xf1
* 2a: 48 8b 44 24 30 mov 0x30(%rsp),%rax <-- trapping instruction
2f: 65 48 2b 05 ad d2 a5 sub %gs:0x12a5d2ad(%rip),%rax # 0x12a5d2e4
36: 12
37: 0f 85 09 03 00 00 jne 0x346
3d: 48 rex.W
3e: 83 .byte 0x83
3f: c4 .byte 0xc4
* Struck through repros no longer work on HEAD.