INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 30768 Comm: syz-executor.1 Not tainted 5.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x198/0x1fd lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:894 [inline] register_lock_class+0x157d/0x1630 kernel/locking/lockdep.c:1206 __lock_acquire+0x101/0x5780 kernel/locking/lockdep.c:4320 lock_acquire+0x1f3/0xaf0 kernel/locking/lockdep.c:5029 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:359 [inline] lock_sock_nested+0x3b/0x110 net/core/sock.c:3041 l2cap_sock_teardown_cb+0x88/0x400 net/bluetooth/l2cap_sock.c:1520 l2cap_chan_del+0xad/0x1300 net/bluetooth/l2cap_core.c:618 l2cap_conn_del+0x46a/0x9e0 net/bluetooth/l2cap_core.c:1890 l2cap_disconn_cfm net/bluetooth/l2cap_core.c:8160 [inline] l2cap_disconn_cfm+0x85/0xa0 net/bluetooth/l2cap_core.c:8153 hci_disconn_cfm include/net/bluetooth/hci_core.h:1438 [inline] hci_conn_hash_flush+0x114/0x220 net/bluetooth/hci_conn.c:1557 hci_dev_do_close+0x5c6/0x1080 net/bluetooth/hci_core.c:1770 hci_unregister_dev+0x1bd/0xe30 net/bluetooth/hci_core.c:3790 vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340 __fput+0x285/0x920 fs/file_table.c:281 task_work_run+0xdd/0x190 kernel/task_work.c:141 exit_task_work include/linux/task_work.h:25 [inline] do_exit+0xb7d/0x29f0 kernel/exit.c:806 do_group_exit+0x125/0x310 kernel/exit.c:903 __do_sys_exit_group kernel/exit.c:914 [inline] __se_sys_exit_group kernel/exit.c:912 [inline] __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:912 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e179 Code: Bad RIP value. RSP: 002b:00007ffd97a98cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001c RCX: 000000000045e179 RDX: 0000000000417841 RSI: 00000000016a9df0 RDI: 0000000000000043 RBP: 00000000004c3a28 R08: 000000000000000c R09: 00000000000ec52d R10: 0000000001b09940 R11: 0000000000000246 R12: 00000000ffffffff R13: 00007ffd97a98e20 R14: 00000000000ec41d R15: 00007ffd97a98e30 BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor instruction fetch in kernel mode #PF: error_code(0x0010) - not-present page PGD 69ea2067 P4D 69ea2067 PUD 69ea3067 PMD 0 Oops: 0010 [#1] PREEMPT SMP KASAN CPU: 1 PID: 30768 Comm: syz-executor.1 Not tainted 5.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:0x0 Code: Bad RIP value. RSP: 0018:ffffc90005997a68 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff8880856b7000 RCX: ffffffff876c89ff RDX: 1ffff1100b8abe8c RSI: ffffffff876c8c4c RDI: ffff88805c55f000 RBP: 00000000ffffffff R08: 0000000000000001 R09: ffff88805c55f067 R10: 0000000000000009 R11: 0000000000000001 R12: 0000000000000067 R13: ffff88805c55f000 R14: 0000000000000000 R15: ffff888091b8fdd8 FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000005a8f1000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: l2cap_sock_teardown_cb+0x374/0x400 net/bluetooth/l2cap_sock.c:1547 l2cap_chan_del+0xad/0x1300 net/bluetooth/l2cap_core.c:618 l2cap_conn_del+0x46a/0x9e0 net/bluetooth/l2cap_core.c:1890 l2cap_disconn_cfm net/bluetooth/l2cap_core.c:8160 [inline] l2cap_disconn_cfm+0x85/0xa0 net/bluetooth/l2cap_core.c:8153 hci_disconn_cfm include/net/bluetooth/hci_core.h:1438 [inline] hci_conn_hash_flush+0x114/0x220 net/bluetooth/hci_conn.c:1557 hci_dev_do_close+0x5c6/0x1080 net/bluetooth/hci_core.c:1770 hci_unregister_dev+0x1bd/0xe30 net/bluetooth/hci_core.c:3790 vhci_release+0x70/0xe0 drivers/bluetooth/hci_vhci.c:340 __fput+0x285/0x920 fs/file_table.c:281 task_work_run+0xdd/0x190 kernel/task_work.c:141 exit_task_work include/linux/task_work.h:25 [inline] do_exit+0xb7d/0x29f0 kernel/exit.c:806 do_group_exit+0x125/0x310 kernel/exit.c:903 __do_sys_exit_group kernel/exit.c:914 [inline] __se_sys_exit_group kernel/exit.c:912 [inline] __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:912 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45e179 Code: Bad RIP value. RSP: 002b:00007ffd97a98cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001c RCX: 000000000045e179 RDX: 0000000000417841 RSI: 00000000016a9df0 RDI: 0000000000000043 RBP: 00000000004c3a28 R08: 000000000000000c R09: 00000000000ec52d R10: 0000000001b09940 R11: 0000000000000246 R12: 00000000ffffffff R13: 00007ffd97a98e20 R14: 00000000000ec41d R15: 00007ffd97a98e30 Modules linked in: CR2: 0000000000000000 ---[ end trace 4878b334a51cf6f9 ]--- RIP: 0010:0x0 Code: Bad RIP value. RSP: 0018:ffffc90005997a68 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff8880856b7000 RCX: ffffffff876c89ff RDX: 1ffff1100b8abe8c RSI: ffffffff876c8c4c RDI: ffff88805c55f000 RBP: 00000000ffffffff R08: 0000000000000001 R09: ffff88805c55f067 R10: 0000000000000009 R11: 0000000000000001 R12: 0000000000000067 R13: ffff88805c55f000 R14: 0000000000000000 R15: ffff888091b8fdd8 FS: 0000000000000000(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000005a8f1000 CR4: 00000000001506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400