INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 1 PID: 37 Comm: kworker/1:1 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: events sco_sock_timeout Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106 assign_lock_key kernel/locking/lockdep.c:976 [inline] register_lock_class+0xc26/0x1230 kernel/locking/lockdep.c:1289 __lock_acquire+0x112/0x3b30 kernel/locking/lockdep.c:5014 lock_acquire kernel/locking/lockdep.c:5754 [inline] lock_acquire+0x1ae/0x520 kernel/locking/lockdep.c:5719 lock_sock_nested+0x3a/0xf0 net/core/sock.c:3523 lock_sock include/net/sock.h:1691 [inline] sco_sock_timeout+0xd6/0x2b0 net/bluetooth/sco.c:96 process_one_work+0x886/0x15d0 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x8b9/0x1290 kernel/workqueue.c:2787 kthread+0x2c6/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 index 16382 is out of range for type 'long unsigned int [8]' CPU: 1 PID: 37 Comm: kworker/1:1 Not tainted 6.7.0-syzkaller-12824-g9d64bf433c53 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: events sco_sock_timeout Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0x111/0x150 lib/ubsan.c:347 decode_tail kernel/locking/qspinlock.c:131 [inline] __pv_queued_spin_lock_slowpath+0xb39/0xc70 kernel/locking/qspinlock.c:471 pv_queued_spin_lock_slowpath arch/x86/include/asm/paravirt.h:584 [inline] queued_spin_lock_slowpath arch/x86/include/asm/qspinlock.h:51 [inline] queued_spin_lock include/asm-generic/qspinlock.h:114 [inline] do_raw_spin_lock+0x20e/0x2b0 kernel/locking/spinlock_debug.c:116 spin_lock_bh include/linux/spinlock.h:356 [inline] lock_sock_nested+0x5f/0xf0 net/core/sock.c:3526 lock_sock include/net/sock.h:1691 [inline] sco_sock_timeout+0xd6/0x2b0 net/bluetooth/sco.c:96 process_one_work+0x886/0x15d0 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x8b9/0x1290 kernel/workqueue.c:2787 kthread+0x2c6/0x3a0 kernel/kthread.c:388 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 ---[ end trace ]---