INFO: trying to register non-static key.
The code is fine but needs lockdep annotation, or maybe
you didn't initialize this object before use?
turning off the locking correctness validator.
CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
assign_lock_key+0x133/0x150 kernel/locking/lockdep.c:986
register_lock_class+0xcc/0x2e0 kernel/locking/lockdep.c:1301
__lock_acquire+0xad/0x2d10 kernel/locking/lockdep.c:5114
lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5870
rt_spin_lock+0x83/0x400 kernel/locking/spinlock_rt.c:56
spin_lock_bh include/linux/spinlock_rt.h:90 [inline]
bt_accept_unlink+0x7d/0x2f0 net/bluetooth/af_bluetooth.c:262
l2cap_sock_teardown_cb+0x17e/0x490 net/bluetooth/l2cap_sock.c:1692
l2cap_chan_del+0x99/0x600 net/bluetooth/l2cap_core.c:659
l2cap_conn_del+0x33d/0x570 net/bluetooth/l2cap_core.c:1803
hci_disconn_cfm include/net/bluetooth/hci_core.h:2151 [inline]
hci_conn_hash_flush+0x10d/0x260 net/bluetooth/hci_conn.c:2733
hci_dev_close_sync+0x85d/0x1150 net/bluetooth/hci_sync.c:5405
hci_dev_do_close net/bluetooth/hci_core.c:499 [inline]
hci_unregister_dev+0x232/0x5b0 net/bluetooth/hci_core.c:2678
vhci_release+0x155/0x1b0 drivers/bluetooth/hci_vhci.c:700
__fput+0x461/0xa70 fs/file_table.c:512
task_work_run+0x1d9/0x270 kernel/task_work.c:233
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x70f/0x22c0 kernel/exit.c:1004
do_group_exit+0x21b/0x2d0 kernel/exit.c:1147
get_signal+0x1284/0x1330 kernel/signal.c:3038
arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop+0x104/0x710 kernel/entry/common.c:101
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc58c65d68e
Code: Unable to access opcode bytes at 0x7fc58c65d664.
RSP: 002b:00007ffe80a78788 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: fffffffffffffe00 RBX: 0000555564862500 RCX: 00007fc58c65d68e
RDX: 0000000000000030 RSI: 00007ffe80a78880 RDI: 00000000000000f9
RBP: 00007ffe80a7882c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000028e
R13: 000000000000001c R14: 00000000000501dd R15: 00007ffe80a78880
non-slab/vmalloc memory
list_del corruption. prev->next should be ffff88806074e780, but was 0000000000000000. (prev=ffff888026086780)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:64!
Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 lib/list_debug.c:62
Code: e8 0b 4f 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dc f1 6b fd 49 8b 17 48 c7 c7 40 52 cc 8b 48 89 de 4c 89 f9 e8 77 ad 61 fc 90 <0f> 0b 4c 89 f7 e8 dc 4e 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ad
RSP: 0018:ffffc90004d876a0 EFLAGS: 00010246
RAX: 000000000000006d RBX: ffff88806074e780 RCX: 256eb42b46d83b00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88806074e780 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff11004c10cf0
R13: dffffc0000000000 R14: ffff888026086780 R15: ffff888026086780
FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 000000000e1b8000 CR4: 00000000003526f0
Call Trace:
__list_del_entry_valid include/linux/list.h:132 [inline]
__list_del_entry include/linux/list.h:246 [inline]
list_del_init include/linux/list.h:318 [inline]
bt_accept_unlink+0x8c/0x2f0 net/bluetooth/af_bluetooth.c:263
l2cap_sock_teardown_cb+0x17e/0x490 net/bluetooth/l2cap_sock.c:1692
l2cap_chan_del+0x99/0x600 net/bluetooth/l2cap_core.c:659
hci_disconn_cfm include/net/bluetooth/hci_core.h:2151 [inline]
hci_conn_hash_flush+0x10d/0x260 net/bluetooth/hci_conn.c:2733
hci_dev_close_sync+0x85d/0x1150 net/bluetooth/hci_sync.c:5405
hci_dev_do_close net/bluetooth/hci_core.c:499 [inline]
hci_unregister_dev+0x232/0x5b0 net/bluetooth/hci_core.c:2678
vhci_release+0x155/0x1b0 drivers/bluetooth/hci_vhci.c:700
__fput+0x461/0xa70 fs/file_table.c:512
task_work_run+0x1d9/0x270 kernel/task_work.c:233
exit_task_work include/linux/task_work.h:40 [inline]
do_exit+0x70f/0x22c0 kernel/exit.c:1004
do_group_exit+0x21b/0x2d0 kernel/exit.c:1147
get_signal+0x1284/0x1330 kernel/signal.c:3038
arch_do_signal_or_restart+0xbc/0x840 arch/x86/kernel/signal.c:337
__exit_to_user_mode_loop kernel/entry/common.c:66 [inline]
exit_to_user_mode_loop+0x104/0x710 kernel/entry/common.c:101
__exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline]
do_syscall_64+0x353/0x580 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fc58c65d68e
Code: Unable to access opcode bytes at 0x7fc58c65d664.
RSP: 002b:00007ffe80a78788 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: fffffffffffffe00 RBX: 0000555564862500 RCX: 00007fc58c65d68e
RDX: 0000000000000030 RSI: 00007ffe80a78880 RDI: 00000000000000f9
RBP: 00007ffe80a7882c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000028e
R13: 000000000000001c R14: 00000000000501dd R15: 00007ffe80a78880
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 lib/list_debug.c:62
Code: e8 0b 4f 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dc f1 6b fd 49 8b 17 48 c7 c7 40 52 cc 8b 48 89 de 4c 89 f9 e8 77 ad 61 fc 90 <0f> 0b 4c 89 f7 e8 dc 4e 4b fd 43 80 3c 2c 00 74 08 4c 89 ff e8 ad
RSP: 0018:ffffc90004d876a0 EFLAGS: 00010246
RAX: 000000000000006d RBX: ffff88806074e780 RCX: 256eb42b46d83b00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88806074e780 R08: 0000000000000000 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffed10170e4903 R12: 1ffff11004c10cf0
R13: dffffc0000000000 R14: ffff888026086780 R15: ffff888026086780
FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 000000000e1b8000 CR4: 00000000003526f0