Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. [ 56.969958][ T251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.982416][ T251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.993505][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 57.014285][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.022577][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.030976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.312363][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.832543][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.842910][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.851082][ T36] usb 1-1: Product: syz [ 57.856379][ T36] usb 1-1: Manufacturer: syz [ 57.860954][ T36] usb 1-1: SerialNumber: syz [ 57.904302][ T36] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 58.552408][ T36] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 58.883017][ T8] Bluetooth: hci0: command 0x0409 tx timeout [ 59.591486][ T8467] usb 1-1: USB disconnect, device number 2 [ 59.600404][ C1] INFO: trying to register non-static key. [ 59.600416][ C1] The code is fine but needs lockdep annotation, or maybe [ 59.600422][ C1] you didn't initialize this object before use? [ 59.600427][ C1] turning off the locking correctness validator. [ 59.600434][ C1] CPU: 1 PID: 8467 Comm: kworker/1:3 Not tainted 5.13.0-rc3-syzkaller #0 [ 59.600456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.600470][ C1] Workqueue: usb_hub_wq hub_event [ 59.600514][ C1] Call Trace: [ 59.600519][ C1] [ 59.600525][ C1] dump_stack+0x141/0x1d7 [ 59.600551][ C1] register_lock_class+0x1077/0x1180 [ 59.600577][ C1] ? mark_lock+0xef/0x17b0 [ 59.600601][ C1] ? is_dynamic_key+0x1a0/0x1a0 [ 59.600624][ C1] ? lock_chain_count+0x20/0x20 [ 59.600649][ C1] __lock_acquire+0x102/0x5230 [ 59.600671][ C1] ? lock_chain_count+0x20/0x20 [ 59.600696][ C1] ? __lock_acquire+0x16a7/0x5230 [ 59.600719][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.600745][ C1] lock_acquire+0x1ab/0x740 [ 59.600767][ C1] ? skb_queue_tail+0x21/0x140 [ 59.600787][ C1] ? lock_release+0x720/0x720 [ 59.600822][ C1] ? ath9k_htc_txstatus+0x500/0x500 [ 59.600842][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 59.600868][ C1] ? skb_queue_tail+0x21/0x140 [ 59.600887][ C1] skb_queue_tail+0x21/0x140 [ 59.600905][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 59.600929][ C1] ath9k_htc_txep+0x287/0x400 [ 59.600949][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 59.600976][ C1] hif_usb_regout_cb+0x115/0x1c0 [ 59.600994][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 59.601014][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 59.601039][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 59.601064][ C1] dummy_timer+0x11f4/0x32a0 [ 59.601091][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.601122][ C1] ? lock_chain_count+0x20/0x20 [ 59.601146][ C1] ? dummy_dequeue+0x500/0x500 [ 59.601171][ C1] ? dummy_dequeue+0x500/0x500 [ 59.601192][ C1] call_timer_fn+0x1a5/0x6b0 [ 59.601214][ C1] ? add_timer_on+0x4a0/0x4a0 [ 59.601237][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 59.601256][ C1] ? dummy_dequeue+0x500/0x500 [ 59.601280][ C1] __run_timers.part.0+0x67c/0xa50 [ 59.601304][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 59.601322][ C1] ? lapic_next_event+0x4d/0x80 [ 59.601346][ C1] run_timer_softirq+0xb3/0x1d0 [ 59.601367][ C1] __do_softirq+0x29b/0x9f6 [ 59.601390][ C1] __irq_exit_rcu+0x136/0x200 [ 59.601411][ C1] irq_exit_rcu+0x5/0x20 [ 59.601431][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 59.601456][ C1] [ 59.601462][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 59.601485][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 59.601513][ C1] Code: f0 4d 89 03 e9 f2 fc ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 <65> 8b 05 39 13 8d 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 59.601532][ C1] RSP: 0018:ffffc9000177f5c8 EFLAGS: 00000293 [ 59.601549][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.601562][ C1] RDX: ffff88801c773880 RSI: ffffffff815cb113 RDI: 0000000000000003 [ 59.601575][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff902268a7 [ 59.601588][ C1] R10: ffffffff815cb109 R11: 0000000000000000 R12: ffffffff84bbfa00 [ 59.601601][ C1] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc9000177f628 [ 59.601615][ C1] ? loopback_xmit+0x630/0x630 [ 59.601638][ C1] ? console_unlock+0x7b9/0xc40 [ 59.601663][ C1] ? console_unlock+0x7c3/0xc40 [ 59.601688][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.601714][ C1] console_unlock+0x7c9/0xc40 [ 59.601739][ C1] ? devkmsg_read+0x7d0/0x7d0 [ 59.601763][ C1] ? lock_release+0x720/0x720 [ 59.601789][ C1] ? dev_vprintk_emit+0x36e/0x3b2 [ 59.601820][ C1] ? dev_vprintk_emit+0x36e/0x3b2 [ 59.601843][ C1] vprintk_emit+0x1ca/0x560 [ 59.601868][ C1] dev_vprintk_emit+0x36e/0x3b2 [ 59.601892][ C1] ? dev_attr_show.cold+0x3a/0x3a [ 59.601917][ C1] ? __lock_acquire+0x16a7/0x5230 [ 59.601941][ C1] dev_printk_emit+0xba/0xf1 [ 59.601964][ C1] ? dev_vprintk_emit+0x3b2/0x3b2 [ 59.601987][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.602011][ C1] ? kasan_quarantine_put+0xf5/0x210 [ 59.602033][ C1] __dev_printk+0xcf/0xf5 [ 59.602053][ C1] _dev_info+0xd7/0x109 [ 59.602074][ C1] ? _dev_notice+0x109/0x109 [ 59.602097][ C1] ? mark_held_locks+0x9f/0xe0 [ 59.602125][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 59.602144][ C1] usb_disconnect.cold+0x25/0x791 [ 59.602166][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 59.602193][ C1] hub_event+0x1c9c/0x4330 [ 59.602219][ C1] ? hub_port_debounce+0x3c0/0x3c0 [ 59.602243][ C1] ? lock_release+0x720/0x720 [ 59.602266][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 59.602293][ C1] process_one_work+0x98d/0x1600 [ 59.602316][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 59.602341][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 59.602359][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 59.602386][ C1] worker_thread+0x64c/0x1120 [ 59.602411][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 59.602430][ C1] ? process_one_work+0x1600/0x1600 [ 59.602454][ C1] kthread+0x3b1/0x4a0 [ 59.602472][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 59.602493][ C1] ret_from_fork+0x1f/0x30 [ 59.602542][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 59.602563][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 59.602575][ C1] CPU: 1 PID: 8467 Comm: kworker/1:3 Not tainted 5.13.0-rc3-syzkaller #0 [ 59.602595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.602607][ C1] Workqueue: usb_hub_wq hub_event [ 59.602627][ C1] RIP: 0010:skb_queue_tail+0x9a/0x140 [ 59.602647][ C1] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 59.602666][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056 [ 59.602680][ C1] RAX: dffffc0000000000 RBX: ffff88802f24b670 RCX: ffffffff815af4d0 [ 59.602694][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff8880285a5148 [ 59.602707][ C1] RBP: ffff8880285a5140 R08: 0000000000000001 R09: 0000000000000003 [ 59.602720][ C1] R10: fffff520001b8129 R11: 0000000000084087 R12: 0000000000000000 [ 59.602733][ C1] R13: ffff88802f24b688 R14: 00000000ffffa1b8 R15: ffffffff84ff16b0 [ 59.602751][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 59.602770][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.602784][ C1] CR2: 000055928c678447 CR3: 0000000021023000 CR4: 0000000000350ee0 [ 59.602798][ C1] Call Trace: [ 59.602802][ C1] [ 59.602815][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 59.602840][ C1] ath9k_htc_txep+0x287/0x400 [ 59.602860][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 59.602887][ C1] hif_usb_regout_cb+0x115/0x1c0 [ 59.602905][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 59.602925][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 59.602950][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 59.602974][ C1] dummy_timer+0x11f4/0x32a0 [ 59.603001][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.603032][ C1] ? lock_chain_count+0x20/0x20 [ 59.603056][ C1] ? dummy_dequeue+0x500/0x500 [ 59.603081][ C1] ? dummy_dequeue+0x500/0x500 [ 59.603104][ C1] call_timer_fn+0x1a5/0x6b0 [ 59.603124][ C1] ? add_timer_on+0x4a0/0x4a0 [ 59.603147][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 59.603166][ C1] ? dummy_dequeue+0x500/0x500 [ 59.603190][ C1] __run_timers.part.0+0x67c/0xa50 [ 59.603214][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 59.603235][ C1] ? lapic_next_event+0x4d/0x80 [ 59.603257][ C1] run_timer_softirq+0xb3/0x1d0 [ 59.603279][ C1] __do_softirq+0x29b/0x9f6 [ 59.603301][ C1] __irq_exit_rcu+0x136/0x200 [ 59.603320][ C1] irq_exit_rcu+0x5/0x20 [ 59.603340][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 59.603365][ C1] [ 59.603371][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 59.603393][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 59.603419][ C1] Code: f0 4d 89 03 e9 f2 fc ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 40 00 <65> 8b 05 39 13 8d 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 59.603438][ C1] RSP: 0018:ffffc9000177f5c8 EFLAGS: 00000293 [ 59.603453][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.603466][ C1] RDX: ffff88801c773880 RSI: ffffffff815cb113 RDI: 0000000000000003 [ 59.603479][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff902268a7 [ 59.603492][ C1] R10: ffffffff815cb109 R11: 0000000000000000 R12: ffffffff84bbfa00 [ 59.603505][ C1] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc9000177f628 [ 59.603519][ C1] ? loopback_xmit+0x630/0x630 [ 59.603540][ C1] ? console_unlock+0x7b9/0xc40 [ 59.603563][ C1] ? console_unlock+0x7c3/0xc40 [ 59.603587][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 59.603613][ C1] console_unlock+0x7c9/0xc40 [ 59.603638][ C1] ? devkmsg_read+0x7d0/0x7d0 [ 59.603661][ C1] ? lock_release+0x720/0x720 [ 59.603687][ C1] ? dev_vprintk_emit+0x36e/0x3b2 [ 59.603709][ C1] ? dev_vprintk_emit+0x36e/0x3b2 [ 59.603733][ C1] vprintk_emit+0x1ca/0x560 [ 59.603758][ C1] dev_vprintk_emit+0x36e/0x3b2 [ 59.603782][ C1] ? dev_attr_show.cold+0x3a/0x3a [ 59.603807][ C1] ? __lock_acquire+0x16a7/0x5230 [ 59.603841][ C1] dev_printk_emit+0xba/0xf1 [ 59.603863][ C1] ? dev_vprintk_emit+0x3b2/0x3b2 [ 59.603887][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 59.603912][ C1] ? kasan_quarantine_put+0xf5/0x210 [ 59.603936][ C1] __dev_printk+0xcf/0xf5 [ 59.603958][ C1] _dev_info+0xd7/0x109 [ 59.603980][ C1] ? _dev_notice+0x109/0x109 [ 59.604003][ C1] ? mark_held_locks+0x9f/0xe0 [ 59.604028][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 59.604049][ C1] usb_disconnect.cold+0x25/0x791 [ 59.604070][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 59.604098][ C1] hub_event+0x1c9c/0x4330 [ 59.604123][ C1] ? hub_port_debounce+0x3c0/0x3c0 [ 59.604147][ C1] ? lock_release+0x720/0x720 [ 59.604170][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 59.604198][ C1] process_one_work+0x98d/0x1600 [ 59.604223][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 59.604251][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 59.604271][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 59.604298][ C1] worker_thread+0x64c/0x1120 [ 59.604320][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 59.604340][ C1] ? process_one_work+0x1600/0x1600 [ 59.604364][ C1] kthread+0x3b1/0x4a0 [ 59.604382][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 59.604403][ C1] ret_from_fork+0x1f/0x30 [ 59.604427][ C1] Modules linked in: [ 59.604442][ C1] ---[ end trace 055a7ed0817bb73c ]--- [ 59.604450][ C1] RIP: 0010:skb_queue_tail+0x9a/0x140 [ 59.604471][ C1] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 59.604489][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056 [ 59.604505][ C1] RAX: dffffc0000000000 RBX: ffff88802f24b670 RCX: ffffffff815af4d0 [ 59.604519][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff8880285a5148 [ 59.604531][ C1] RBP: ffff8880285a5140 R08: 0000000000000001 R09: 0000000000000003 [ 59.604544][ C1] R10: fffff520001b8129 R11: 0000000000084087 R12: 0000000000000000 [ 59.604556][ C1] R13: ffff88802f24b688 R14: 00000000ffffa1b8 R15: ffffffff84ff16b0 [ 59.604572][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 59.604590][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.604604][ C1] CR2: 000055928c678447 CR3: 0000000021023000 CR4: 0000000000350ee0 [ 59.604619][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 59.610712][ C1] Kernel Offset: disabled [ 60.776144][ C1] Rebooting in 86400 seconds..