Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.450275][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.969842][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 68.979043][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.987113][ T7] usb 1-1: Product: syz [ 68.992069][ T7] usb 1-1: Manufacturer: syz [ 68.996696][ T7] usb 1-1: SerialNumber: syz [ 69.054914][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 69.649772][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 70.656692][ T4951] usb 1-1: USB disconnect, device number 2 [ 70.666336][ C0] INFO: trying to register non-static key. [ 70.666350][ C0] The code is fine but needs lockdep annotation, or maybe [ 70.666357][ C0] you didn't initialize this object before use? [ 70.666364][ C0] turning off the locking correctness validator. [ 70.666373][ C0] CPU: 0 PID: 4951 Comm: kworker/0:4 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 70.666402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.666420][ C0] Workqueue: usb_hub_wq hub_event [ 70.666471][ C0] Call Trace: [ 70.666477][ C0] [ 70.666485][ C0] dump_stack_lvl+0x13e/0x1d6 [ 70.666522][ C0] register_lock_class+0x1077/0x1180 [ 70.666547][ C0] ? mark_lock+0xef/0x17b0 [ 70.666570][ C0] ? is_dynamic_key+0x1a0/0x1a0 [ 70.666591][ C0] ? lock_chain_count+0x20/0x20 [ 70.666626][ C0] __lock_acquire+0x102/0x5230 [ 70.666649][ C0] ? lock_chain_count+0x20/0x20 [ 70.666682][ C0] ? __lock_acquire+0x16a7/0x5230 [ 70.666705][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.666733][ C0] lock_acquire+0x1ab/0x740 [ 70.666754][ C0] ? skb_queue_tail+0x21/0x140 [ 70.666783][ C0] ? lock_release+0x720/0x720 [ 70.666809][ C0] ? ath9k_htc_txstatus+0x500/0x500 [ 70.666859][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 70.666887][ C0] ? skb_queue_tail+0x21/0x140 [ 70.666913][ C0] skb_queue_tail+0x21/0x140 [ 70.666938][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.666960][ C0] ath9k_htc_txep+0x287/0x400 [ 70.666988][ C0] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 70.667016][ C0] hif_usb_regout_cb+0x115/0x1c0 [ 70.667038][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 70.667064][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 70.667093][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 70.667124][ C0] dummy_timer+0x11f9/0x32b0 [ 70.667152][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.667181][ C0] ? lock_chain_count+0x20/0x20 [ 70.667210][ C0] ? dummy_dequeue+0x500/0x500 [ 70.667234][ C0] ? dummy_dequeue+0x500/0x500 [ 70.667256][ C0] call_timer_fn+0x1a5/0x6b0 [ 70.667302][ C0] ? add_timer_on+0x4a0/0x4a0 [ 70.667330][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 70.667358][ C0] ? dummy_dequeue+0x500/0x500 [ 70.667381][ C0] __run_timers.part.0+0x67c/0xa50 [ 70.667414][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 70.667442][ C0] ? lapic_next_event+0x4d/0x80 [ 70.667472][ C0] run_timer_softirq+0xb3/0x1d0 [ 70.667501][ C0] __do_softirq+0x29b/0x9fb [ 70.667535][ C0] __irq_exit_rcu+0x136/0x200 [ 70.667562][ C0] irq_exit_rcu+0x5/0x20 [ 70.667588][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 70.667616][ C0] [ 70.667624][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 70.667657][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 70.667686][ C0] Code: 01 f0 4d 89 03 e9 63 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 <65> 8b 05 e9 1b 8c 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 70.667712][ C0] RSP: 0018:ffffc9000166f5c8 EFLAGS: 00000293 [ 70.667732][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.667747][ C0] RDX: ffff888018ee3900 RSI: ffffffff815d8c43 RDI: 0000000000000003 [ 70.667764][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90440967 [ 70.667780][ C0] R10: ffffffff815d8c39 R11: 0000000000000000 R12: ffffffff84c07930 [ 70.667796][ C0] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc9000166f628 [ 70.667821][ C0] ? loopback_xmit+0x630/0x630 [ 70.667853][ C0] ? console_unlock+0x7b9/0xc40 [ 70.667877][ C0] ? console_unlock+0x7c3/0xc40 [ 70.667901][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.667928][ C0] console_unlock+0x7c9/0xc40 [ 70.667953][ C0] ? devkmsg_read+0x7d0/0x7d0 [ 70.667981][ C0] ? lock_release+0x720/0x720 [ 70.668007][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 70.668033][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 70.668060][ C0] vprintk_emit+0x1ca/0x560 [ 70.668085][ C0] dev_vprintk_emit+0x36e/0x3b2 [ 70.668111][ C0] ? dev_attr_show.cold+0x3a/0x3a [ 70.668139][ C0] ? __lock_acquire+0x16a7/0x5230 [ 70.668164][ C0] dev_printk_emit+0xba/0xf1 [ 70.668188][ C0] ? dev_vprintk_emit+0x3b2/0x3b2 [ 70.668214][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.668244][ C0] __dev_printk+0xcf/0xf5 [ 70.668268][ C0] _dev_info+0xd7/0x109 [ 70.668292][ C0] ? _dev_notice+0x109/0x109 [ 70.668317][ C0] ? mark_held_locks+0x9f/0xe0 [ 70.668341][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 70.668374][ C0] usb_disconnect.cold+0x25/0x78e [ 70.668407][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 70.668436][ C0] hub_event+0x1c9c/0x4330 [ 70.668486][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 70.668518][ C0] ? lock_release+0x720/0x720 [ 70.668540][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.668562][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 70.668591][ C0] process_one_work+0x98d/0x1600 [ 70.668623][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 70.668652][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 70.668674][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 70.668700][ C0] worker_thread+0x64c/0x1120 [ 70.668730][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 70.668754][ C0] ? process_one_work+0x1600/0x1600 [ 70.668782][ C0] kthread+0x3b1/0x4a0 [ 70.668805][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 70.668836][ C0] ret_from_fork+0x1f/0x30 [ 70.668891][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 70.668930][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 70.668945][ C0] CPU: 0 PID: 4951 Comm: kworker/0:4 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0 [ 70.668972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.668987][ C0] Workqueue: usb_hub_wq hub_event [ 70.669027][ C0] RIP: 0010:skb_queue_tail+0x9a/0x140 [ 70.669055][ C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 70.669094][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010046 [ 70.669114][ C0] RAX: dffffc0000000000 RBX: ffff88801dd13670 RCX: ffffffff815bcfe0 [ 70.669130][ C0] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff888013fb6a08 [ 70.669145][ C0] RBP: ffff888013fb6a00 R08: 0000000000000001 R09: 0000000000000003 [ 70.669159][ C0] R10: fffff52000000f29 R11: 0000000000000000 R12: 0000000000000000 [ 70.669175][ C0] R13: ffff88801dd13688 R14: 00000000ffffa5e0 R15: ffffffff8503ae00 [ 70.669193][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 70.669219][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.669237][ C0] CR2: 00000000004bc438 CR3: 000000000be8e000 CR4: 00000000001506f0 [ 70.669253][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.669268][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.669285][ C0] Call Trace: [ 70.669291][ C0] [ 70.669298][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.669322][ C0] ath9k_htc_txep+0x287/0x400 [ 70.669350][ C0] ath9k_htc_txcompletion_cb+0x1cd/0x2f0 [ 70.669381][ C0] hif_usb_regout_cb+0x115/0x1c0 [ 70.669402][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 70.669428][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 70.669458][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 70.669493][ C0] dummy_timer+0x11f9/0x32b0 [ 70.669522][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.669555][ C0] ? lock_chain_count+0x20/0x20 [ 70.669588][ C0] ? dummy_dequeue+0x500/0x500 [ 70.669614][ C0] ? dummy_dequeue+0x500/0x500 [ 70.669635][ C0] call_timer_fn+0x1a5/0x6b0 [ 70.669661][ C0] ? add_timer_on+0x4a0/0x4a0 [ 70.669691][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 70.669719][ C0] ? dummy_dequeue+0x500/0x500 [ 70.669745][ C0] __run_timers.part.0+0x67c/0xa50 [ 70.669777][ C0] ? call_timer_fn+0x6b0/0x6b0 [ 70.669805][ C0] ? lapic_next_event+0x4d/0x80 [ 70.669840][ C0] run_timer_softirq+0xb3/0x1d0 [ 70.669869][ C0] __do_softirq+0x29b/0x9fb [ 70.669903][ C0] __irq_exit_rcu+0x136/0x200 [ 70.669931][ C0] irq_exit_rcu+0x5/0x20 [ 70.669956][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 70.669984][ C0] [ 70.669992][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 70.670025][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 70.670054][ C0] Code: 01 f0 4d 89 03 e9 63 fd ff ff b9 ff ff ff ff ba 08 00 00 00 4d 8b 03 48 0f bd ca 49 8b 45 00 48 63 c9 e9 64 ff ff ff 0f 1f 00 <65> 8b 05 e9 1b 8c 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b [ 70.670078][ C0] RSP: 0018:ffffc9000166f5c8 EFLAGS: 00000293 [ 70.670098][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.670113][ C0] RDX: ffff888018ee3900 RSI: ffffffff815d8c43 RDI: 0000000000000003 [ 70.670130][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff90440967 [ 70.670146][ C0] R10: ffffffff815d8c39 R11: 0000000000000000 R12: ffffffff84c07930 [ 70.670163][ C0] R13: 0000000000000200 R14: dffffc0000000000 R15: ffffc9000166f628 [ 70.670181][ C0] ? loopback_xmit+0x630/0x630 [ 70.670211][ C0] ? console_unlock+0x7b9/0xc40 [ 70.670235][ C0] ? console_unlock+0x7c3/0xc40 [ 70.670259][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.670286][ C0] console_unlock+0x7c9/0xc40 [ 70.670323][ C0] ? devkmsg_read+0x7d0/0x7d0 [ 70.670346][ C0] ? lock_release+0x720/0x720 [ 70.670371][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 70.670395][ C0] ? dev_vprintk_emit+0x36e/0x3b2 [ 70.670421][ C0] vprintk_emit+0x1ca/0x560 [ 70.670445][ C0] dev_vprintk_emit+0x36e/0x3b2 [ 70.670469][ C0] ? dev_attr_show.cold+0x3a/0x3a [ 70.670496][ C0] ? __lock_acquire+0x16a7/0x5230 [ 70.670519][ C0] dev_printk_emit+0xba/0xf1 [ 70.670541][ C0] ? dev_vprintk_emit+0x3b2/0x3b2 [ 70.670566][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.670592][ C0] __dev_printk+0xcf/0xf5 [ 70.670615][ C0] _dev_info+0xd7/0x109 [ 70.670638][ C0] ? _dev_notice+0x109/0x109 [ 70.670663][ C0] ? mark_held_locks+0x9f/0xe0 [ 70.670686][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 70.670717][ C0] usb_disconnect.cold+0x25/0x78e [ 70.670748][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 70.670776][ C0] hub_event+0x1c9c/0x4330 [ 70.670813][ C0] ? hub_port_debounce+0x3c0/0x3c0 [ 70.670850][ C0] ? lock_release+0x720/0x720 [ 70.670871][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 70.670894][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 70.670922][ C0] process_one_work+0x98d/0x1600 [ 70.670952][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 70.670983][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 70.671006][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 70.671036][ C0] worker_thread+0x64c/0x1120 [ 70.671068][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 70.671093][ C0] ? process_one_work+0x1600/0x1600 [ 70.671123][ C0] kthread+0x3b1/0x4a0 [ 70.671146][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 70.671172][ C0] ret_from_fork+0x1f/0x30 [ 70.671204][ C0] Modules linked in: [ 70.671222][ C0] ---[ end trace ae5dd16f08f1e282 ]--- [ 70.671232][ C0] RIP: 0010:skb_queue_tail+0x9a/0x140 [ 70.671260][ C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 70.671283][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010046 [ 70.671302][ C0] RAX: dffffc0000000000 RBX: ffff88801dd13670 RCX: ffffffff815bcfe0 [ 70.671318][ C0] RDX: 0000000000000000 RSI: 0000000000000046 RDI: ffff888013fb6a08 [ 70.671333][ C0] RBP: ffff888013fb6a00 R08: 0000000000000001 R09: 0000000000000003 [ 70.671349][ C0] R10: fffff52000000f29 R11: 0000000000000000 R12: 0000000000000000 [ 70.671364][ C0] R13: ffff88801dd13688 R14: 00000000ffffa5e0 R15: ffffffff8503ae00 [ 70.671380][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 70.671401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.671415][ C0] CR2: 00000000004bc438 CR3: 000000000be8e000 CR4: 00000000001506f0 [ 70.671429][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.671442][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.671458][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 70.672818][ C0] Kernel Offset: disabled [ 71.872736][ C0] Rebooting in 86400 seconds..