ci starts bisection 2025-09-04 05:51:47.329728136 +0000 UTC m=+8028.217300688 bisecting cause commit starting from 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 building syzkaller on 96a211bca8bcc72de621f8990d476177d3463857 ensuring issue is reproducible on original commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: d4ab9146a96a5f5df6cde7a9f6f73a043405cfdd60c9cacb0b715f4dd526d8af all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] check whether we can drop unnecessary instrumentation disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2542e3ac2a25ac0fa4c960e5c8735d0ad70a3c61bf39a20399c36dc61e7f8655 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the bug reproduces without the instrumentation disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan locking], they are not needed kconfig minimization: base=4099 full=8510 leaves diff=2184 split chunks (needed=false): <2184> split chunk #0 of len 2184 into 5 parts testing without sub-chunk 1/5 disabling configs for [bug_or_warning kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b11d66f0186a2cd01b55ea19ddcc06b78dc7b07d650b82a737643865ad2e95ec all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 709a94a1cacc62e98cf701a1c72643d71d46b1ea40dff936f1707e0a95922db8 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan bug_or_warning], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 785cc9b48edd98ffeefaae25f53c96129f2912f33f8d3a78e7676b34d3057c2a all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [locking atomic_sleep hang memleak ubsan bug_or_warning kasan], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 471470e9f8e1fe69d3655ce08b8c2027aa5ecbb0b0b2ee04cab841c4cc9d7cf8 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [bug_or_warning kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f0695cddb2526d4ba82bd227de5743bc0644fc68a2c19b7b5c6b5f2e80814638 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] the chunk can be dropped disabling configs for [atomic_sleep hang memleak ubsan bug_or_warning kasan locking], they are not needed picked [v6.16 v6.15 v6.14 v6.12 v6.10 v6.8 v6.6 v6.4 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 39 release tags testing release v6.16 testing commit 038d61fd642278bab63ee8ef722c50d10ab01e8f gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 03767f245675b596010e350cce70aa782e4ee5a2af3c55a7c31dac6678f16308 all runs: OK false negative chance: 0.000 # git bisect start 5d50cf9f7cf20a17ac469c20a2e07c29c1f6aab7 038d61fd642278bab63ee8ef722c50d10ab01e8f Bisecting: 9585 revisions left to test after this (roughly 13 steps) [0cdee263bc5e7b20f657ea09f9272f50c568f35b] Merge tag 'media/v6.17-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit 0cdee263bc5e7b20f657ea09f9272f50c568f35b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1a399e4e442fecc8683d016aee7ff09c42f56758ce05783206b8a97e3eff3ee5 all runs: OK false negative chance: 0.000 # git bisect good 0cdee263bc5e7b20f657ea09f9272f50c568f35b Bisecting: 4766 revisions left to test after this (roughly 12 steps) [a0f253a6b2b75a6b89378e4191a646985d7f2fbf] Merge branch 'for-next' of https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip.git testing commit a0f253a6b2b75a6b89378e4191a646985d7f2fbf gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 545c894e094750e2f830b3351adbf3292d79f230d2a9558be84457887f96bccc all runs: OK false negative chance: 0.000 # git bisect good a0f253a6b2b75a6b89378e4191a646985d7f2fbf Bisecting: 2155 revisions left to test after this (roughly 11 steps) [bb44a842b3b32b68bfcbf9c6c60ab6e58f7c8ccf] Merge branch 'drm-next' of https://gitlab.freedesktop.org/drm/kernel.git testing commit bb44a842b3b32b68bfcbf9c6c60ab6e58f7c8ccf gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: dda35ec86a7fa9d68cb6f0db65e556fbfa94f6a3ca51a3e936eb6e7ea8da642b all runs: OK false negative chance: 0.000 # git bisect good bb44a842b3b32b68bfcbf9c6c60ab6e58f7c8ccf Bisecting: 1016 revisions left to test after this (roughly 10 steps) [f5bbbdc77e08fa421508e76071565fa3bbe41f3b] Merge branch 'master' of https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git testing commit f5bbbdc77e08fa421508e76071565fa3bbe41f3b gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: de9cb99ab55ac2048f9c79cdb416491c175d76c2cc02fb5e7a2e055dada33e40 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] # git bisect bad f5bbbdc77e08fa421508e76071565fa3bbe41f3b Bisecting: 613 revisions left to test after this (roughly 9 steps) [c4d94303dbc99da31a661f13c5561fca3ffc8288] Merge branch 'for-next' of https://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394.git testing commit c4d94303dbc99da31a661f13c5561fca3ffc8288 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 2a779ac253ffcf032e747d6b72325a89a08d57d127ed7d9b2fd5018b0a88e823 all runs: OK false negative chance: 0.000 # git bisect good c4d94303dbc99da31a661f13c5561fca3ffc8288 Bisecting: 311 revisions left to test after this (roughly 8 steps) [00fa4f0892e0c864f959b4ea417aa63fbeb622f6] Merge branch 'for-mfd-next' of https://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd.git testing commit 00fa4f0892e0c864f959b4ea417aa63fbeb622f6 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: eaf1a87e3d73ba8ed26aaf972db86387443e26df9b9da51cee3c1d785d8e1f69 all runs: OK false negative chance: 0.000 # git bisect good 00fa4f0892e0c864f959b4ea417aa63fbeb622f6 Bisecting: 149 revisions left to test after this (roughly 7 steps) [33e7d19a20368065ce86cb749f14bf4c9dbe682c] Merge branch into tip/master: 'x86/core' testing commit 33e7d19a20368065ce86cb749f14bf4c9dbe682c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f28b09242d3e4b7e26163975b08fcae0c032c0e1bb0dc95f85aa1a5fd371e571 all runs: OK false negative chance: 0.000 # git bisect good 33e7d19a20368065ce86cb749f14bf4c9dbe682c Bisecting: 60 revisions left to test after this (roughly 6 steps) [05d9bf25de516900d75e620b9a2db68a09a03242] Merge branch 'for-next' of https://git.kernel.org/pub/scm/linux/kernel/git/robh/linux.git testing commit 05d9bf25de516900d75e620b9a2db68a09a03242 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 346dcfbb92706c0f544a841df1d3923169042eee1c3c824b53f8a7e0ff7379ac all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] # git bisect bad 05d9bf25de516900d75e620b9a2db68a09a03242 Bisecting: 43 revisions left to test after this (roughly 6 steps) [a330aefedc746312573401407a081d98b10d0f97] Merge branch 'next' of https://github.com/cschaufler/smack-next testing commit a330aefedc746312573401407a081d98b10d0f97 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: eebc30657c8365ad60d98e62344cdcc6a7a7904228b4175fed22f42e52b9674b all runs: OK false negative chance: 0.000 # git bisect good a330aefedc746312573401407a081d98b10d0f97 Bisecting: 21 revisions left to test after this (roughly 5 steps) [09f6203315eb16d761c883b01354232bf48b929d] dt-bindings: display: ti,tdp158: Add missing reg constraint testing commit 09f6203315eb16d761c883b01354232bf48b929d gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: a5201b87cc79aeede681315218daab9c6e8930632ceb8d97addc0047d6fb6de7 all runs: OK false negative chance: 0.000 # git bisect good 09f6203315eb16d761c883b01354232bf48b929d Bisecting: 9 revisions left to test after this (roughly 4 steps) [28e1691ef9b650935bdc4f2dba4e9feda3c8624c] Merge branch 'next' of https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git testing commit 28e1691ef9b650935bdc4f2dba4e9feda3c8624c gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 58fd48e2e009750705ca5fcc560426aa4e5a026f9ce3075c97d4352286a98cbd all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] # git bisect bad 28e1691ef9b650935bdc4f2dba4e9feda3c8624c Bisecting: 5 revisions left to test after this (roughly 3 steps) [0a561e3904a92492fee8e02a9f69276e939fd990] audit: create audit_stamp structure testing commit 0a561e3904a92492fee8e02a9f69276e939fd990 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: c37a927bde0e37e831689084b48f12dbb486ad70c5d33e0b12cf6bed20271239 all runs: OK false negative chance: 0.000 # git bisect good 0a561e3904a92492fee8e02a9f69276e939fd990 Bisecting: 2 revisions left to test after this (roughly 2 steps) [0ffbc876d03c80b83d70aeefac7bbb94a9f4e135] audit: add record for multiple object contexts testing commit 0ffbc876d03c80b83d70aeefac7bbb94a9f4e135 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: e23b762af7ac1c9d18e27f361eab97bdc0b5349b126401873892bc47593f9360 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] # git bisect bad 0ffbc876d03c80b83d70aeefac7bbb94a9f4e135 Bisecting: 0 revisions left to test after this (roughly 1 step) [eb59d494eebd4c5414728a35cdea6a0ba78ff26e] audit: add record for multiple task security contexts testing commit eb59d494eebd4c5414728a35cdea6a0ba78ff26e gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0a3b8b7745260fc4dc93c6dae73db51e404742b7c07b64b29acd9a6ff3ab0216 all runs: crashed: INFO: trying to register non-static key in skb_dequeue representative crash: INFO: trying to register non-static key in skb_dequeue, types: [UNKNOWN] # git bisect bad eb59d494eebd4c5414728a35cdea6a0ba78ff26e Bisecting: 0 revisions left to test after this (roughly 0 steps) [a59076f2669ec23a122549e1f4114e8d4255b632] lsm: security_lsmblob_to_secctx module selection testing commit a59076f2669ec23a122549e1f4114e8d4255b632 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 07cad37b0ef711a0ceccf7a6a8f2e20da48dc71b1a7c2a6f7621674fd62690b8 all runs: OK false negative chance: 0.000 # git bisect good a59076f2669ec23a122549e1f4114e8d4255b632 eb59d494eebd4c5414728a35cdea6a0ba78ff26e is the first bad commit commit eb59d494eebd4c5414728a35cdea6a0ba78ff26e Author: Casey Schaufler Date: Sat Aug 16 10:28:58 2025 -0700 audit: add record for multiple task security contexts Replace the single skb pointer in an audit_buffer with a list of skb pointers. Add the audit_stamp information to the audit_buffer as there's no guarantee that there will be an audit_context containing the stamp associated with the event. At audit_log_end() time create auxiliary records as have been added to the list. Functions are created to manage the skb list in the audit_buffer. Create a new audit record AUDIT_MAC_TASK_CONTEXTS. An example of the MAC_TASK_CONTEXTS record is: type=MAC_TASK_CONTEXTS msg=audit(1600880931.832:113) subj_apparmor=unconfined subj_smack=_ When an audit event includes a AUDIT_MAC_TASK_CONTEXTS record the "subj=" field in other records in the event will be "subj=?". An AUDIT_MAC_TASK_CONTEXTS record is supplied when the system has multiple security modules that may make access decisions based on a subject security context. Refactor audit_log_task_context(), creating a new audit_log_subj_ctx(). This is used in netlabel auditing to provide multiple subject security contexts as necessary. Suggested-by: Paul Moore Signed-off-by: Casey Schaufler [PM: subj tweak, audit example readability indents] Signed-off-by: Paul Moore include/linux/audit.h | 16 ++++ include/uapi/linux/audit.h | 1 + kernel/audit.c | 208 ++++++++++++++++++++++++++++++++++++------- net/netlabel/netlabel_user.c | 9 +- security/apparmor/lsm.c | 3 + security/selinux/hooks.c | 3 + security/smack/smack_lsm.c | 3 + 7 files changed, 202 insertions(+), 41 deletions(-) accumulated error probability: 0.00 culprit signature: 0a3b8b7745260fc4dc93c6dae73db51e404742b7c07b64b29acd9a6ff3ab0216 parent signature: 07cad37b0ef711a0ceccf7a6a8f2e20da48dc71b1a7c2a6f7621674fd62690b8 revisions tested: 23, total time: 9h14m21.482115837s (build: 4h58m14.597825247s, test: 3h33m44.136500147s) first bad commit: eb59d494eebd4c5414728a35cdea6a0ba78ff26e audit: add record for multiple task security contexts recipients (to): ["apparmor@lists.ubuntu.com" "audit@vger.kernel.org" "casey@schaufler-ca.com" "casey@schaufler-ca.com" "davem@davemloft.net" "edumazet@google.com" "eparis@redhat.com" "jmorris@namei.org" "john.johansen@canonical.com" "kuba@kernel.org" "linux-security-module@vger.kernel.org" "netdev@vger.kernel.org" "pabeni@redhat.com" "paul@paul-moore.com" "paul@paul-moore.com" "selinux@vger.kernel.org" "serge@hallyn.com" "stephen.smalley.work@gmail.com"] recipients (cc): ["horms@kernel.org" "linux-kernel@vger.kernel.org" "omosnace@redhat.com"] crash: INFO: trying to register non-static key in skb_dequeue RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff RBP: 00007f46bce1f090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f46bd1e6038 R14: 00007f46bd1e5fa0 R15: 00007ffd0ddbf568 INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 UID: 0 PID: 2867 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0xa2/0xf0 lib/dump_stack.c:120 assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:984 register_lock_class+0xdf/0x280 kernel/locking/lockdep.c:1299 __lock_acquire+0x74/0x4c0 kernel/locking/lockdep.c:5112 lock_acquire+0xd6/0x200 kernel/locking/lockdep.c:5868 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x52/0x90 kernel/locking/spinlock.c:162 skb_dequeue+0x18/0x70 net/core/skbuff.c:3895 audit_buffer_free kernel/audit.c:1813 [inline] audit_buffer_alloc kernel/audit.c:1843 [inline] audit_log_start+0x240/0x430 kernel/audit.c:1947 audit_seccomp+0x34/0xa0 kernel/auditsc.c:3000 seccomp_log kernel/seccomp.c:1033 [inline] __seccomp_filter+0x8d2/0x8f0 kernel/seccomp.c:-1 syscall_trace_enter+0xaa/0x160 kernel/entry/syscall-common.c:44 syscall_enter_from_user_mode_work include/linux/entry-common.h:95 [inline] syscall_enter_from_user_mode include/linux/entry-common.h:125 [inline] do_syscall_64+0x68/0x250 arch/x86/entry/syscall_64.c:90 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f46bcfaebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f46bce1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 00007f46bd1e5fa0 RCX: 00007f46bcfaebe9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff RBP: 00007f46bce1f090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f46bd1e6038 R14: 00007f46bd1e5fa0 R15: 00007ffd0ddbf568 audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 audit: out of memory in audit_log_start