[[0;32m OK [0m] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
Starting Load/Save RF Kill Switch Status...
[[0;32m OK [0m] Started Load/Save RF Kill Switch Status.
[[0;32m OK [0m] Started Update UTMP about System Runlevel Changes.
Debian GNU/Linux 9 syzkaller ttyS0
syzkaller login: [ 16.161770][ C1] random: crng init done
[ 16.166025][ C1] random: 7 urandom warning(s) missed due to ratelimiting
Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts.
executing program
[ 29.639318][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 30.158554][ T67] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 30.167695][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 30.175747][ T67] usb 1-1: Product: syz
[ 30.180024][ T67] usb 1-1: Manufacturer: syz
[ 30.184618][ T67] usb 1-1: SerialNumber: syz
[ 30.229674][ T67] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 30.908727][ T67] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
executing program
[ 31.910516][ T68] usb 1-1: USB disconnect, device number 2
[ 31.920564][ C0] INFO: trying to register non-static key.
[ 31.926383][ C0] the code is fine but needs lockdep annotation.
[ 31.932699][ C0] turning off the locking correctness validator.
[ 31.939140][ C0] CPU: 0 PID: 323 Comm: systemd-udevd Not tainted 5.8.0-rc1-syzkaller #0
[ 31.947560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 31.957718][ C0] Call Trace:
[ 31.961152][ C0]
[ 31.964014][ C0] dump_stack+0xf6/0x16e
[ 31.968235][ C0] register_lock_class+0x1228/0x16d0
[ 31.973508][ C0] ? get_stack_info+0x32/0x140
[ 31.978249][ C0] ? stack_access_ok+0xd0/0x130
[ 31.983087][ C0] ? arch_stack_walk+0x5e/0xf0
[ 31.987839][ C0] ? is_dynamic_key+0x1b0/0x1b0
[ 31.992837][ C0] ? unwind_next_frame+0xf64/0x1de0
[ 31.998291][ C0] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 32.004462][ C0] __lock_acquire+0x101/0x6270
[ 32.009205][ C0] ? print_usage_bug+0x200/0x200
[ 32.014130][ C0] ? __kernel_text_address+0x9/0x30
[ 32.019337][ C0] ? unwind_get_return_address+0x5a/0xa0
[ 32.024960][ C0] ? profile_setup.cold+0xc1/0xc1
[ 32.029964][ C0] ? __lock_acquire+0x234b/0x6270
[ 32.034974][ C0] ? lockdep_hardirqs_on_prepare+0x550/0x550
[ 32.041023][ C0] lock_acquire+0x18b/0x7c0
[ 32.045498][ C0] ? skb_queue_tail+0x27/0x180
[ 32.050242][ C0] ? lock_release+0x710/0x710
[ 32.054888][ C0] ? lock_acquire+0x18b/0x7c0
[ 32.059538][ C0] ? kcov_remote_start+0xd9/0x390
[ 32.064535][ C0] ? ath9k_htc_txstatus+0x3f0/0x3f0
[ 32.069713][ C0] _raw_spin_lock_irqsave+0x32/0x50
[ 32.074882][ C0] ? skb_queue_tail+0x27/0x180
[ 32.079616][ C0] skb_queue_tail+0x27/0x180
[ 32.084192][ C0] ath9k_htc_txep+0x287/0x400
[ 32.088851][ C0] ath9k_htc_txcompletion_cb+0x1a1/0x2b0
[ 32.094452][ C0] hif_usb_regout_cb+0x115/0x1c0
[ 32.099377][ C0] ? _raw_spin_unlock_irqrestore+0x2a/0x40
[ 32.105153][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 32.110516][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 32.115690][ C0] dummy_timer+0x125e/0x32b4
[ 32.120263][ C0] ? __lock_acquire+0x234b/0x6270
[ 32.125257][ C0] ? lock_acquire+0x18b/0x7c0
[ 32.129905][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.134812][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 32.140335][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 32.145603][ C0] call_timer_fn+0x1ac/0x6e0
[ 32.150169][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.155076][ C0] ? msleep_interruptible+0x130/0x130
[ 32.160432][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 32.165606][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 32.171662][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.176577][ C0] run_timer_softirq+0x5e5/0x14c0
[ 32.181593][ C0] ? add_timer+0x7b0/0x7b0
[ 32.185990][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 32.191527][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 32.196783][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 32.202732][ C0] __do_softirq+0x21e/0x996
[ 32.207653][ C0] asm_call_on_stack+0xf/0x20
[ 32.212296][ C0]
[ 32.215209][ C0] do_softirq_own_stack+0x109/0x140
[ 32.220386][ C0] irq_exit_rcu+0x16f/0x1a0
[ 32.224861][ C0] sysvec_apic_timer_interrupt+0xd3/0x1b0
[ 32.230550][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 32.236511][ C0] RIP: 0010:lock_release+0x3c9/0x710
[ 32.241766][ C0] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 bb 02 00 00 83 ad 84 08 00 00 01 0f 85 4a 01 00 00 ff 34 24 9d <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 c7 43
[ 32.261612][ C0] RSP: 0018:ffff8881cd71f8f0 EFLAGS: 00000246
[ 32.267659][ C0] RAX: 0000000000000007 RBX: 1ffff11039ae3f21 RCX: 1ffff11039a85d8f
[ 32.275609][ C0] RDX: 0000000000000000 RSI: 1ffff11039a85d96 RDI: ffff8881cd42ec84
[ 32.283563][ C0] RBP: ffff8881cd42e400 R08: ffff8881cd42e400 R09: fffffbfff1014d0a
[ 32.291509][ C0] R10: ffffffff880a684f R11: fffffbfff1014d09 R12: f002853324f3be8d
[ 32.299466][ C0] R13: ffffffff816b05ef R14: ffff8881cd42ec80 R15: 0000000000000002
[ 32.307422][ C0] ? __unlock_page_memcg+0x4f/0x100
[ 32.312595][ C0] ? lock_downgrade+0x720/0x720
[ 32.317420][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 32.322331][ C0] ? PageHuge+0x11c/0x170
[ 32.326630][ C0] unmap_page_range+0xe2f/0x1fc0
[ 32.331551][ C0] ? vm_normal_page+0x2e0/0x2e0
[ 32.336372][ C0] ? lock_downgrade+0x720/0x720
[ 32.341191][ C0] ? mark_held_locks+0x9f/0xe0
[ 32.345927][ C0] unmap_single_vma+0x196/0x300
[ 32.350747][ C0] unmap_vmas+0x174/0x2f0
[ 32.355046][ C0] ? zap_vma_ptes+0x100/0x100
[ 32.359693][ C0] exit_mmap+0x278/0x4d0
[ 32.363938][ C0] ? __ia32_sys_munmap+0x80/0x80
[ 32.368856][ C0] mmput+0xce/0x3d0
[ 32.372641][ C0] do_exit+0xaaf/0x2cb0
[ 32.376766][ C0] ? find_held_lock+0x2d/0x110
[ 32.381512][ C0] ? mm_update_next_owner+0x7a0/0x7a0
[ 32.387201][ C0] ? __secure_computing+0xb4/0x280
[ 32.392293][ C0] do_group_exit+0x125/0x340
[ 32.396854][ C0] __x64_sys_exit_group+0x3a/0x50
[ 32.401861][ C0] do_syscall_64+0x50/0x90
[ 32.406281][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 32.412154][ C0] RIP: 0033:0x7f7ad8c2a618
[ 32.416727][ C0] Code: Bad RIP value.
[ 32.420774][ C0] RSP: 002b:00007ffd37c486a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
[ 32.429166][ C0] RAX: ffffffffffffffda RBX: 00007ffd37c48770 RCX: 00007f7ad8c2a618
[ 32.437119][ C0] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
[ 32.445061][ C0] RBP: 00007ffd37c48820 R08: 00000000000000e7 R09: fffffffffffffe50
[ 32.453003][ C0] R10: 00000000ffffffff R11: 0000000000000206 R12: 0000000000000000
[ 32.460965][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000000000e
[ 32.468929][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN
[ 32.479911][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 32.488304][ C0] CPU: 0 PID: 323 Comm: systemd-udevd Not tainted 5.8.0-rc1-syzkaller #0
[ 32.496690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 32.506733][ C0] RIP: 0010:skb_queue_tail+0xbb/0x180
[ 32.512096][ C0] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 00 00 00 4c 89 e2 48 89 6b 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 55 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
[ 32.531673][ C0] RSP: 0018:ffff8881db2099f0 EFLAGS: 00010046
[ 32.537711][ C0] RAX: dffffc0000000000 RBX: ffff8881cd7ab590 RCX: ffffffff81274370
[ 32.545759][ C0] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff8881cfdc1148
[ 32.553704][ C0] RBP: ffff8881cfdc1140 R08: 0000000000000004 R09: ffffed103b64132d
[ 32.561661][ C0] R10: 0000000000000003 R11: ffffed103b64132c R12: 0000000000000000
[ 32.569758][ C0] R13: ffff8881cd7ab598 R14: ffff8881cd7ab5a8 R15: ffffffff82dcf820
[ 32.577718][ C0] FS: 00007f7ad9dda8c0(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
[ 32.586622][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.593180][ C0] CR2: 0000559104643e60 CR3: 00000001ce0ed000 CR4: 00000000001406f0
[ 32.601134][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.609088][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.617029][ C0] Call Trace:
[ 32.620295][ C0]
[ 32.623126][ C0] ath9k_htc_txep+0x287/0x400
[ 32.627776][ C0] ath9k_htc_txcompletion_cb+0x1a1/0x2b0
[ 32.633381][ C0] hif_usb_regout_cb+0x115/0x1c0
[ 32.638289][ C0] ? _raw_spin_unlock_irqrestore+0x2a/0x40
[ 32.644083][ C0] __usb_hcd_giveback_urb+0x29a/0x550
[ 32.649475][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 32.654650][ C0] dummy_timer+0x125e/0x32b4
[ 32.659215][ C0] ? __lock_acquire+0x234b/0x6270
[ 32.664215][ C0] ? lock_acquire+0x18b/0x7c0
[ 32.668884][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.673803][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 32.679328][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 32.684582][ C0] call_timer_fn+0x1ac/0x6e0
[ 32.689144][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.694052][ C0] ? msleep_interruptible+0x130/0x130
[ 32.699401][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 32.704578][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 32.710544][ C0] ? dummy_udc_probe+0x980/0x980
[ 32.715449][ C0] run_timer_softirq+0x5e5/0x14c0
[ 32.720445][ C0] ? add_timer+0x7b0/0x7b0
[ 32.724844][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 32.730358][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 32.735612][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550
[ 32.741561][ C0] __do_softirq+0x21e/0x996
[ 32.746035][ C0] asm_call_on_stack+0xf/0x20
[ 32.750687][ C0]
[ 32.753607][ C0] do_softirq_own_stack+0x109/0x140
[ 32.758775][ C0] irq_exit_rcu+0x16f/0x1a0
[ 32.763247][ C0] sysvec_apic_timer_interrupt+0xd3/0x1b0
[ 32.768946][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 32.774895][ C0] RIP: 0010:lock_release+0x3c9/0x710
[ 32.780160][ C0] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 bb 02 00 00 83 ad 84 08 00 00 01 0f 85 4a 01 00 00 ff 34 24 9d <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 c7 43
[ 32.799747][ C0] RSP: 0018:ffff8881cd71f8f0 EFLAGS: 00000246
[ 32.805793][ C0] RAX: 0000000000000007 RBX: 1ffff11039ae3f21 RCX: 1ffff11039a85d8f
[ 32.816077][ C0] RDX: 0000000000000000 RSI: 1ffff11039a85d96 RDI: ffff8881cd42ec84
[ 32.824019][ C0] RBP: ffff8881cd42e400 R08: ffff8881cd42e400 R09: fffffbfff1014d0a
[ 32.831993][ C0] R10: ffffffff880a684f R11: fffffbfff1014d09 R12: f002853324f3be8d
[ 32.839971][ C0] R13: ffffffff816b05ef R14: ffff8881cd42ec80 R15: 0000000000000002
[ 32.847960][ C0] ? __unlock_page_memcg+0x4f/0x100
[ 32.853138][ C0] ? lock_downgrade+0x720/0x720
[ 32.857971][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 32.862889][ C0] ? PageHuge+0x11c/0x170
[ 32.867200][ C0] unmap_page_range+0xe2f/0x1fc0
[ 32.872116][ C0] ? vm_normal_page+0x2e0/0x2e0
[ 32.876955][ C0] ? lock_downgrade+0x720/0x720
[ 32.881793][ C0] ? mark_held_locks+0x9f/0xe0
[ 32.886701][ C0] unmap_single_vma+0x196/0x300
[ 32.891539][ C0] unmap_vmas+0x174/0x2f0
[ 32.895842][ C0] ? zap_vma_ptes+0x100/0x100
[ 32.900492][ C0] exit_mmap+0x278/0x4d0
[ 32.904708][ C0] ? __ia32_sys_munmap+0x80/0x80
[ 32.909618][ C0] mmput+0xce/0x3d0
[ 32.913468][ C0] do_exit+0xaaf/0x2cb0
[ 32.917649][ C0] ? find_held_lock+0x2d/0x110
[ 32.922455][ C0] ? mm_update_next_owner+0x7a0/0x7a0
[ 32.927859][ C0] ? __secure_computing+0xb4/0x280
[ 32.932952][ C0] do_group_exit+0x125/0x340
[ 32.937534][ C0] __x64_sys_exit_group+0x3a/0x50
[ 32.942532][ C0] do_syscall_64+0x50/0x90
[ 32.946921][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 32.952795][ C0] RIP: 0033:0x7f7ad8c2a618
[ 32.957177][ C0] Code: Bad RIP value.
[ 32.961224][ C0] RSP: 002b:00007ffd37c486a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7
[ 32.969611][ C0] RAX: ffffffffffffffda RBX: 00007ffd37c48770 RCX: 00007f7ad8c2a618
[ 32.977553][ C0] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000
[ 32.985496][ C0] RBP: 00007ffd37c48820 R08: 00000000000000e7 R09: fffffffffffffe50
[ 32.993458][ C0] R10: 00000000ffffffff R11: 0000000000000206 R12: 0000000000000000
[ 33.002453][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000000000e
[ 33.010422][ C0] Modules linked in:
[ 33.014307][ C0] ---[ end trace 53afd8f120df8e51 ]---
[ 33.019988][ C0] RIP: 0010:skb_queue_tail+0xbb/0x180
[ 33.025340][ C0] Code: 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 82 00 00 00 4c 89 e2 48 89 6b 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 55 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
[ 33.044921][ C0] RSP: 0018:ffff8881db2099f0 EFLAGS: 00010046
[ 33.050959][ C0] RAX: dffffc0000000000 RBX: ffff8881cd7ab590 RCX: ffffffff81274370
[ 33.058914][ C0] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff8881cfdc1148
[ 33.066870][ C0] RBP: ffff8881cfdc1140 R08: 0000000000000004 R09: ffffed103b64132d
[ 33.074949][ C0] R10: 0000000000000003 R11: ffffed103b64132c R12: 0000000000000000
[ 33.082900][ C0] R13: ffff8881cd7ab598 R14: ffff8881cd7ab5a8 R15: ffffffff82dcf820
[ 33.090856][ C0] FS: 00007f7ad9dda8c0(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
[ 33.099764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.106329][ C0] CR2: 0000559104643e60 CR3: 00000001ce0ed000 CR4: 00000000001406f0
[ 33.114275][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.122220][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.130163][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 33.138213][ C0] Kernel Offset: disabled
[ 33.142538][ C0] Rebooting in 86400 seconds..