forked to background, child pid 3172
no interfaces have a carrier
[ 21.031379][ T3173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.041461][ T3173] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts.
syzkaller login: [ 39.633184][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 39.641100][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 39.653594][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 39.654956][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 39.661456][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 39.679716][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 39.972872][ T139] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 40.273065][ T139] usb 1-1: too many configurations: 85, using maximum allowed: 8
[ 41.162942][ T139] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 41.172023][ T139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 41.180132][ T139] usb 1-1: Product: syz
[ 41.184549][ T139] usb 1-1: Manufacturer: syz
[ 41.189118][ T139] usb 1-1: SerialNumber: syz
[ 41.244004][ T139] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 41.863019][ T139] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 42.897597][ T2924] usb 1-1: USB disconnect, device number 2
[ 42.905904][ C1] INFO: trying to register non-static key.
[ 42.911701][ C1] The code is fine but needs lockdep annotation, or maybe
[ 42.918782][ C1] you didn't initialize this object before use?
[ 42.924988][ C1] turning off the locking correctness validator.
[ 42.931278][ C1] CPU: 1 PID: 3596 Comm: syz-executor279 Not tainted 5.17.0-rc5-syzkaller-00021-g23d04328444a #0
[ 42.941759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.951788][ C1] Call Trace:
[ 42.955041][ C1]
[ 42.957866][ C1] dump_stack_lvl+0xcd/0x134
[ 42.962458][ C1] register_lock_class+0xf1b/0x11a0
[ 42.967632][ C1] ? mark_lock.part.0+0xee/0x1910
[ 42.972630][ C1] ? is_bpf_text_address+0x99/0x170
[ 42.977804][ C1] ? is_dynamic_key.part.0+0x130/0x130
[ 42.983237][ C1] ? lock_chain_count+0x20/0x20
[ 42.988059][ C1] ? unwind_get_return_address+0x51/0x90
[ 42.993910][ C1] ? create_prof_cpu_mask+0x20/0x20
[ 42.999086][ C1] ? arch_stack_walk+0x93/0xe0
[ 43.003825][ C1] ? mark_lock.part.0+0xee/0x1910
[ 43.008827][ C1] __lock_acquire+0x10b/0x56c0
[ 43.013570][ C1] ? __lock_acquire+0x1666/0x56c0
[ 43.018658][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 43.024697][ C1] lock_acquire+0x1ab/0x510
[ 43.029191][ C1] ? skb_queue_tail+0x21/0x140
[ 43.033933][ C1] ? lock_release+0x720/0x720
[ 43.038607][ C1] ? find_held_lock+0x2d/0x110
[ 43.043357][ C1] ? ath9k_htc_txstatus+0x4c0/0x4c0
[ 43.048547][ C1] _raw_spin_lock_irqsave+0x39/0x50
[ 43.053724][ C1] ? skb_queue_tail+0x21/0x140
[ 43.058465][ C1] skb_queue_tail+0x21/0x140
[ 43.063184][ C1] ath9k_htc_txep+0x287/0x400
[ 43.067846][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0
[ 43.073459][ C1] hif_usb_regout_cb+0x115/0x1c0
[ 43.078376][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 43.084026][ C1] usb_hcd_giveback_urb+0x367/0x410
[ 43.089212][ C1] dummy_timer+0x11f9/0x32b0
[ 43.093780][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 43.099744][ C1] ? dummy_dequeue+0x500/0x500
[ 43.104484][ C1] ? dummy_dequeue+0x500/0x500
[ 43.109237][ C1] call_timer_fn+0x1a5/0x6b0
[ 43.113816][ C1] ? timer_fixup_activate+0x350/0x350
[ 43.119174][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.124348][ C1] ? dummy_dequeue+0x500/0x500
[ 43.129089][ C1] __run_timers.part.0+0x67c/0xa30
[ 43.134186][ C1] ? call_timer_fn+0x6b0/0x6b0
[ 43.138929][ C1] run_timer_softirq+0xb3/0x1d0
[ 43.143755][ C1] __do_softirq+0x29b/0x9c2
[ 43.148233][ C1] __irq_exit_rcu+0x123/0x180
[ 43.152884][ C1] irq_exit_rcu+0x5/0x20
[ 43.157099][ C1] sysvec_apic_timer_interrupt+0x93/0xc0
[ 43.162708][ C1]
[ 43.165612][ C1]
[ 43.168514][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 43.174466][ C1] RIP: 0010:smp_call_function_many_cond+0x4e6/0xc90
[ 43.181030][ C1] Code: 0b 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 89 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e9 05 00 00 8b 43 08 31
[ 43.200607][ C1] RSP: 0018:ffffc90001cbfb08 EFLAGS: 00000293
[ 43.206648][ C1] RAX: 0000000000000000 RBX: ffff8880b9c41fa0 RCX: 0000000000000000
[ 43.214597][ C1] RDX: ffff8880225f9d00 RSI: ffffffff816d6214 RDI: 0000000000000003
[ 43.222538][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001
[ 43.230479][ C1] R10: ffffffff816d623a R11: 0000000000000000 R12: ffffed10173883f5
[ 43.238425][ C1] R13: 0000000000000000 R14: ffff8880b9c41fa8 R15: 0000000000000001
[ 43.246373][ C1] ? smp_call_function_many_cond+0x50a/0xc90
[ 43.252332][ C1] ? smp_call_function_many_cond+0x4e4/0xc90
[ 43.258285][ C1] ? smp_call_function_many_cond+0x4e4/0xc90
[ 43.264240][ C1] ? leave_mm+0x30/0x30
[ 43.268375][ C1] ? leave_mm+0x30/0x30
[ 43.272505][ C1] on_each_cpu_cond_mask+0x56/0xa0
[ 43.277591][ C1] flush_tlb_mm_range+0x2e0/0x410
[ 43.282595][ C1] tlb_finish_mmu+0x3e7/0x8c0
[ 43.287247][ C1] exit_mmap+0x21b/0x670
[ 43.291461][ C1] ? exit_aio+0x276/0x340
[ 43.295764][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 43.301722][ C1] __mmput+0x122/0x4b0
[ 43.305763][ C1] mmput+0x56/0x60
[ 43.309456][ C1] do_exit+0xa3c/0x2a30
[ 43.313586][ C1] ? lock_downgrade+0x6e0/0x6e0
[ 43.318414][ C1] ? mm_update_next_owner+0x7a0/0x7a0
[ 43.323762][ C1] do_group_exit+0xd2/0x2f0
[ 43.328240][ C1] __x64_sys_exit_group+0x3a/0x50
[ 43.333236][ C1] do_syscall_64+0x35/0xb0
[ 43.337626][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 43.343491][ C1] RIP: 0033:0x7f049cb4fc19
[ 43.347891][ C1] Code: Unable to access opcode bytes at RIP 0x7f049cb4fbef.
[ 43.355225][ C1] RSP: 002b:00007ffedb224928 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 43.363608][ C1] RAX: ffffffffffffffda RBX: 00007f049cbbf3f0 RCX: 00007f049cb4fc19
[ 43.371552][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 43.379499][ C1] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000ffffff83
[ 43.387444][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f049cbbf3f0
[ 43.395392][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.403345][ C1]
[ 43.406361][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 43.418044][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 43.426426][ C1] CPU: 1 PID: 3596 Comm: syz-executor279 Not tainted 5.17.0-rc5-syzkaller-00021-g23d04328444a #0
[ 43.436892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 43.447007][ C1] RIP: 0010:skb_queue_tail+0x9e/0x140
[ 43.452359][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
[ 43.471939][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056
[ 43.477979][ C1] RAX: dffffc0000000000 RBX: ffff88801d483838 RCX: ffffffff815e2ba0
[ 43.485924][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff88807baeac88
[ 43.493868][ C1] RBP: ffff88807baeac80 R08: 0000000000000001 R09: 0000000000000003
[ 43.501812][ C1] R10: fffff520001b8129 R11: 0000000000000000 R12: 0000000000000000
[ 43.509756][ C1] R13: ffff88801d483850 R14: 00000000ffff9b2b R15: ffffffff851c3e90
[ 43.517701][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 43.526602][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.533161][ C1] CR2: 00007f049cbc4148 CR3: 000000000b88e000 CR4: 0000000000350ee0
[ 43.541105][ C1] Call Trace:
[ 43.544356][ C1]
[ 43.547175][ C1] ath9k_htc_txep+0x287/0x400
[ 43.551828][ C1] ath9k_htc_txcompletion_cb+0x1cd/0x2f0
[ 43.557436][ C1] hif_usb_regout_cb+0x115/0x1c0
[ 43.562347][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 43.567694][ C1] usb_hcd_giveback_urb+0x367/0x410
[ 43.572870][ C1] dummy_timer+0x11f9/0x32b0
[ 43.577441][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 43.583401][ C1] ? dummy_dequeue+0x500/0x500
[ 43.588140][ C1] ? dummy_dequeue+0x500/0x500
[ 43.592878][ C1] call_timer_fn+0x1a5/0x6b0
[ 43.597440][ C1] ? timer_fixup_activate+0x350/0x350
[ 43.602785][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.607959][ C1] ? dummy_dequeue+0x500/0x500
[ 43.612698][ C1] __run_timers.part.0+0x67c/0xa30
[ 43.617782][ C1] ? call_timer_fn+0x6b0/0x6b0
[ 43.622520][ C1] run_timer_softirq+0xb3/0x1d0
[ 43.627341][ C1] __do_softirq+0x29b/0x9c2
[ 43.631818][ C1] __irq_exit_rcu+0x123/0x180
[ 43.636469][ C1] irq_exit_rcu+0x5/0x20
[ 43.640687][ C1] sysvec_apic_timer_interrupt+0x93/0xc0
[ 43.646296][ C1]
[ 43.649198][ C1]
[ 43.652102][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 43.658053][ C1] RIP: 0010:smp_call_function_many_cond+0x4e6/0xc90
[ 43.664707][ C1] Code: 0b 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 89 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e9 05 00 00 8b 43 08 31
[ 43.684291][ C1] RSP: 0018:ffffc90001cbfb08 EFLAGS: 00000293
[ 43.690336][ C1] RAX: 0000000000000000 RBX: ffff8880b9c41fa0 RCX: 0000000000000000
[ 43.698281][ C1] RDX: ffff8880225f9d00 RSI: ffffffff816d6214 RDI: 0000000000000003
[ 43.706224][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001
[ 43.714169][ C1] R10: ffffffff816d623a R11: 0000000000000000 R12: ffffed10173883f5
[ 43.722113][ C1] R13: 0000000000000000 R14: ffff8880b9c41fa8 R15: 0000000000000001
[ 43.730062][ C1] ? smp_call_function_many_cond+0x50a/0xc90
[ 43.736029][ C1] ? smp_call_function_many_cond+0x4e4/0xc90
[ 43.741990][ C1] ? smp_call_function_many_cond+0x4e4/0xc90
[ 43.747946][ C1] ? leave_mm+0x30/0x30
[ 43.752077][ C1] ? leave_mm+0x30/0x30
[ 43.756204][ C1] on_each_cpu_cond_mask+0x56/0xa0
[ 43.761289][ C1] flush_tlb_mm_range+0x2e0/0x410
[ 43.766288][ C1] tlb_finish_mmu+0x3e7/0x8c0
[ 43.770940][ C1] exit_mmap+0x21b/0x670
[ 43.775156][ C1] ? exit_aio+0x276/0x340
[ 43.779462][ C1] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 43.785416][ C1] __mmput+0x122/0x4b0
[ 43.789456][ C1] mmput+0x56/0x60
[ 43.793160][ C1] do_exit+0xa3c/0x2a30
[ 43.797292][ C1] ? lock_downgrade+0x6e0/0x6e0
[ 43.802117][ C1] ? mm_update_next_owner+0x7a0/0x7a0
[ 43.807465][ C1] do_group_exit+0xd2/0x2f0
[ 43.811943][ C1] __x64_sys_exit_group+0x3a/0x50
[ 43.816943][ C1] do_syscall_64+0x35/0xb0
[ 43.821334][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 43.827197][ C1] RIP: 0033:0x7f049cb4fc19
[ 43.831584][ C1] Code: Unable to access opcode bytes at RIP 0x7f049cb4fbef.
[ 43.838915][ C1] RSP: 002b:00007ffedb224928 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 43.847399][ C1] RAX: ffffffffffffffda RBX: 00007f049cbbf3f0 RCX: 00007f049cb4fc19
[ 43.855361][ C1] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 43.863303][ C1] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000ffffff83
[ 43.871246][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f049cbbf3f0
[ 43.879191][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.887139][ C1]
[ 43.890131][ C1] Modules linked in:
[ 43.893998][ C1] ---[ end trace 0000000000000000 ]---
[ 43.899419][ C1] RIP: 0010:skb_queue_tail+0x9e/0x140
[ 43.904771][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
[ 43.924356][ C1] RSP: 0018:ffffc90000dc09d8 EFLAGS: 00010056
[ 43.930401][ C1] RAX: dffffc0000000000 RBX: ffff88801d483838 RCX: ffffffff815e2ba0
[ 43.938353][ C1] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff88807baeac88
[ 43.946303][ C1] RBP: ffff88807baeac80 R08: 0000000000000001 R09: 0000000000000003
[ 43.954253][ C1] R10: fffff520001b8129 R11: 0000000000000000 R12: 0000000000000000
[ 43.962201][ C1] R13: ffff88801d483850 R14: 00000000ffff9b2b R15: ffffffff851c3e90
[ 43.970156][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 43.979078][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 43.985748][ C1] CR2: 00007f049cbc4148 CR3: 000000000b88e000 CR4: 0000000000350ee0
[ 43.993703][ C1] Kernel panic - not syncing: Fatal exception in interrupt
[ 44.001793][ C1] Kernel Offset: disabled
[ 44.006100][ C1] Rebooting in 86400 seconds..