forked to background, child pid 3172 no interfaces have a carrier [ 21.031379][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.041461][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. syzkaller login: [ 39.633184][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.641100][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.653594][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.654956][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.661456][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 39.679716][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.972872][ T139] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.273065][ T139] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 41.162942][ T139] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.172023][ T139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.180132][ T139] usb 1-1: Product: syz [ 41.184549][ T139] usb 1-1: Manufacturer: syz [ 41.189118][ T139] usb 1-1: SerialNumber: syz [ 41.244004][ T139] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.863019][ T139] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 42.897597][ T2924] usb 1-1: USB disconnect, device number 2 [ 42.905904][ C1] INFO: trying to register non-static key. [ 42.911701][ C1] The code is fine but needs lockdep annotation, or maybe [ 42.918782][ C1] you didn't initialize this object before use? [ 42.924988][ C1] turning off the locking correctness validator. [ 42.931278][ C1] CPU: 1 PID: 3596 Comm: syz-executor279 Not tainted 5.17.0-rc5-syzkaller-00021-g23d04328444a #0 [ 42.941759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.951788][ C1] Call Trace: [ 42.955041][ C1] [ 42.957866][ C1] dump_stack_lvl+0xcd/0x134 [ 42.962458][ C1] register_lock_class+0xf1b/0x11a0 [ 42.967632][ C1] ? mark_lock.part.0+0xee/0x1910 [ 42.972630][ C1] ? is_bpf_text_address+0x99/0x170 [ 42.977804][ C1] ? is_dynamic_key.part.0+0x130/0x130 [ 42.983237][ C1] ? lock_chain_count+0x20/0x20 [ 42.988059][ C1] ? unwind_get_return_address+0x51/0x90 [ 42.993910][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 42.999086][ C1] ? arch_stack_walk+0x93/0xe0 [ 43.003825][ C1] ? mark_lock.part.0+0xee/0x1910 [ 43.008827][ C1] __lock_acquire+0x10b/0x56c0 [ 43.013570][ C1] ? __lock_acquire+0x1666/0x56c0 [ 43.018658][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.024697][ C1] lock_acquire+0x1ab/0x510 [ 43.029191][ C1] ? skb_queue_tail+0x21/0x140 [ 43.033933][ C1] ? lock_release+0x720/0x720 [ 43.038607][ C1] ? find_held_lock+0x2d/0x110 [ 43.043357][ C1] ? ath9k_htc_txstatus+0x4c0/0x4c0 [ 43.048547][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 43.053724][ C1] ? skb_queue_tail+0x21/0x140 [ 43.058465][ C1] skb_queue_tail+0x21/0x140 [ 43.063184][ C1] ath9k_htc_txep+0x287/0x400 [ 43.067846][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 43.073459][ C1] hif_usb_regout_cb+0x115/0x1c0 [ 43.078376][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 43.084026][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 43.089212][ C1] dummy_timer+0x11f9/0x32b0 [ 43.093780][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.099744][ C1] ? dummy_dequeue+0x500/0x500 [ 43.104484][ C1] ? dummy_dequeue+0x500/0x500 [ 43.109237][ C1] call_timer_fn+0x1a5/0x6b0 [ 43.113816][ C1] ? timer_fixup_activate+0x350/0x350 [ 43.119174][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 43.124348][ C1] ? dummy_dequeue+0x500/0x500 [ 43.129089][ C1] __run_timers.part.0+0x67c/0xa30 [ 43.134186][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 43.138929][ C1] run_timer_softirq+0xb3/0x1d0 [ 43.143755][ C1] __do_softirq+0x29b/0x9c2 [ 43.148233][ C1] __irq_exit_rcu+0x123/0x180 [ 43.152884][ C1] irq_exit_rcu+0x5/0x20 [ 43.157099][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 43.162708][ C1] [ 43.165612][ C1] [ 43.168514][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 43.174466][ C1] RIP: 0010:smp_call_function_many_cond+0x4e6/0xc90 [ 43.181030][ C1] Code: 0b 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 89 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e9 05 00 00 8b 43 08 31 [ 43.200607][ C1] RSP: 0018:ffffc90001cbfb08 EFLAGS: 00000293 [ 43.206648][ C1] RAX: 0000000000000000 RBX: ffff8880b9c41fa0 RCX: 0000000000000000 [ 43.214597][ C1] RDX: ffff8880225f9d00 RSI: ffffffff816d6214 RDI: 0000000000000003 [ 43.222538][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 43.230479][ C1] R10: ffffffff816d623a R11: 0000000000000000 R12: ffffed10173883f5 [ 43.238425][ C1] R13: 0000000000000000 R14: ffff8880b9c41fa8 R15: 0000000000000001 [ 43.246373][ C1] ? smp_call_function_many_cond+0x50a/0xc90 [ 43.252332][ C1] ? smp_call_function_many_cond+0x4e4/0xc90 [ 43.258285][ C1] ? smp_call_function_many_cond+0x4e4/0xc90 [ 43.264240][ C1] ? leave_mm+0x30/0x30 [ 43.268375][ C1] ? leave_mm+0x30/0x30 [ 43.272505][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 43.277591][ C1] flush_tlb_mm_range+0x2e0/0x410 [ 43.282595][ C1] tlb_finish_mmu+0x3e7/0x8c0 [ 43.287247][ C1] exit_mmap+0x21b/0x670 [ 43.291461][ C1] ? exit_aio+0x276/0x340 [ 43.295764][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 43.301722][ C1] __mmput+0x122/0x4b0 [ 43.305763][ C1] mmput+0x56/0x60 [ 43.309456][ C1] do_exit+0xa3c/0x2a30 [ 43.313586][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 43.318414][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 43.323762][ C1] do_group_exit+0xd2/0x2f0 [ 43.328240][ C1] __x64_sys_exit_group+0x3a/0x50 [ 43.333236][ C1] do_syscall_64+0x35/0xb0 [ 43.337626][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.343491][ C1] RIP: 0033:0x7f049cb4fc19 [ 43.347891][ C1] Code: Unable to access opcode bytes at RIP 0x7f049cb4fbef. [ 43.355225][ C1] RSP: 002b:00007ffedb224928 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 43.363608][ C1] RAX: ffffffffffffffda RBX: 00007f049cbbf3f0 RCX: 00007f049cb4fc19 [ 43.371552][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 43.379499][ C1] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000ffffff83 [ 43.387444][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f049cbbf3f0 [ 43.395392][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 43.403345][ C1] [ 43.406361][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 43.418044][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 43.426426][ C1] CPU: 1 PID: 3596 Comm: syz-executor279 Not tainted 5.17.0-rc5-syzkaller-00021-g23d04328444a #0 [ 43.436892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.447007][ C1] RIP: 0010:skb_queue_tail+0x9e/0x140 [ 43.452359][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 43.471939][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056 [ 43.477979][ C1] RAX: dffffc0000000000 RBX: ffff88801d483838 RCX: ffffffff815e2ba0 [ 43.485924][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff88807baeac88 [ 43.493868][ C1] RBP: ffff88807baeac80 R08: 0000000000000001 R09: 0000000000000003 [ 43.501812][ C1] R10: fffff520001b8129 R11: 0000000000000000 R12: 0000000000000000 [ 43.509756][ C1] R13: ffff88801d483850 R14: 00000000ffff9b2b R15: ffffffff851c3e90 [ 43.517701][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 43.526602][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.533161][ C1] CR2: 00007f049cbc4148 CR3: 000000000b88e000 CR4: 0000000000350ee0 [ 43.541105][ C1] Call Trace: [ 43.544356][ C1] [ 43.547175][ C1] ath9k_htc_txep+0x287/0x400 [ 43.551828][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 43.557436][ C1] hif_usb_regout_cb+0x115/0x1c0 [ 43.562347][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 43.567694][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 43.572870][ C1] dummy_timer+0x11f9/0x32b0 [ 43.577441][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 43.583401][ C1] ? dummy_dequeue+0x500/0x500 [ 43.588140][ C1] ? dummy_dequeue+0x500/0x500 [ 43.592878][ C1] call_timer_fn+0x1a5/0x6b0 [ 43.597440][ C1] ? timer_fixup_activate+0x350/0x350 [ 43.602785][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 43.607959][ C1] ? dummy_dequeue+0x500/0x500 [ 43.612698][ C1] __run_timers.part.0+0x67c/0xa30 [ 43.617782][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 43.622520][ C1] run_timer_softirq+0xb3/0x1d0 [ 43.627341][ C1] __do_softirq+0x29b/0x9c2 [ 43.631818][ C1] __irq_exit_rcu+0x123/0x180 [ 43.636469][ C1] irq_exit_rcu+0x5/0x20 [ 43.640687][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 43.646296][ C1] [ 43.649198][ C1] [ 43.652102][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 43.658053][ C1] RIP: 0010:smp_call_function_many_cond+0x4e6/0xc90 [ 43.664707][ C1] Code: 0b 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 89 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e9 05 00 00 8b 43 08 31 [ 43.684291][ C1] RSP: 0018:ffffc90001cbfb08 EFLAGS: 00000293 [ 43.690336][ C1] RAX: 0000000000000000 RBX: ffff8880b9c41fa0 RCX: 0000000000000000 [ 43.698281][ C1] RDX: ffff8880225f9d00 RSI: ffffffff816d6214 RDI: 0000000000000003 [ 43.706224][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 43.714169][ C1] R10: ffffffff816d623a R11: 0000000000000000 R12: ffffed10173883f5 [ 43.722113][ C1] R13: 0000000000000000 R14: ffff8880b9c41fa8 R15: 0000000000000001 [ 43.730062][ C1] ? smp_call_function_many_cond+0x50a/0xc90 [ 43.736029][ C1] ? smp_call_function_many_cond+0x4e4/0xc90 [ 43.741990][ C1] ? smp_call_function_many_cond+0x4e4/0xc90 [ 43.747946][ C1] ? leave_mm+0x30/0x30 [ 43.752077][ C1] ? leave_mm+0x30/0x30 [ 43.756204][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 43.761289][ C1] flush_tlb_mm_range+0x2e0/0x410 [ 43.766288][ C1] tlb_finish_mmu+0x3e7/0x8c0 [ 43.770940][ C1] exit_mmap+0x21b/0x670 [ 43.775156][ C1] ? exit_aio+0x276/0x340 [ 43.779462][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 43.785416][ C1] __mmput+0x122/0x4b0 [ 43.789456][ C1] mmput+0x56/0x60 [ 43.793160][ C1] do_exit+0xa3c/0x2a30 [ 43.797292][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 43.802117][ C1] ? mm_update_next_owner+0x7a0/0x7a0 [ 43.807465][ C1] do_group_exit+0xd2/0x2f0 [ 43.811943][ C1] __x64_sys_exit_group+0x3a/0x50 [ 43.816943][ C1] do_syscall_64+0x35/0xb0 [ 43.821334][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.827197][ C1] RIP: 0033:0x7f049cb4fc19 [ 43.831584][ C1] Code: Unable to access opcode bytes at RIP 0x7f049cb4fbef. [ 43.838915][ C1] RSP: 002b:00007ffedb224928 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 43.847399][ C1] RAX: ffffffffffffffda RBX: 00007f049cbbf3f0 RCX: 00007f049cb4fc19 [ 43.855361][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 43.863303][ C1] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000ffffff83 [ 43.871246][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f049cbbf3f0 [ 43.879191][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 43.887139][ C1] [ 43.890131][ C1] Modules linked in: [ 43.893998][ C1] ---[ end trace 0000000000000000 ]--- [ 43.899419][ C1] RIP: 0010:skb_queue_tail+0x9e/0x140 [ 43.904771][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 43.924356][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056 [ 43.930401][ C1] RAX: dffffc0000000000 RBX: ffff88801d483838 RCX: ffffffff815e2ba0 [ 43.938353][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff88807baeac88 [ 43.946303][ C1] RBP: ffff88807baeac80 R08: 0000000000000001 R09: 0000000000000003 [ 43.954253][ C1] R10: fffff520001b8129 R11: 0000000000000000 R12: 0000000000000000 [ 43.962201][ C1] R13: ffff88801d483850 R14: 00000000ffff9b2b R15: ffffffff851c3e90 [ 43.970156][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 43.979078][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.985748][ C1] CR2: 00007f049cbc4148 CR3: 000000000b88e000 CR4: 0000000000350ee0 [ 43.993703][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 44.001793][ C1] Kernel Offset: disabled [ 44.006100][ C1] Rebooting in 86400 seconds..