INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc5-syzkaller-gd37537a1f7cf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 assign_lock_key kernel/locking/lockdep.c:982 [inline] register_lock_class+0xdb6/0x1120 kernel/locking/lockdep.c:1295 __lock_acquire+0x10d/0x5f30 kernel/locking/lockdep.c:4965 lock_acquire kernel/locking/lockdep.c:5705 [inline] lock_acquire+0x1b1/0x520 kernel/locking/lockdep.c:5670 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x3d/0x60 kernel/locking/spinlock.c:162 skb_queue_tail+0x25/0x150 net/core/skbuff.c:3744 ath9k_htc_txep+0x28b/0x400 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c:712 ath9k_htc_txcompletion_cb+0x1d1/0x2f0 drivers/net/wireless/ath/ath9k/htc_hst.c:353 hif_usb_regout_cb+0x119/0x1d0 drivers/net/wireless/ath/ath9k/hif_usb.c:88 __usb_hcd_giveback_urb+0x2b6/0x5c0 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754 dummy_timer+0x13b6/0x3400 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700 expire_timers+0x29b/0x4b0 kernel/time/timer.c:1751 __run_timers kernel/time/timer.c:2022 [inline] __run_timers kernel/time/timer.c:1995 [inline] run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035 __do_softirq+0x1c1/0x8e8 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu kernel/softirq.c:650 [inline] irq_exit_rcu+0x11b/0x190 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x92/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:acpi_safe_halt+0x40/0x50 drivers/acpi/processor_idle.c:113 Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 66 90 0f 1f 44 00 00 0f 00 2d 87 f6 60 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f RSP: 0018:ffffffff87a07d18 EFLAGS: 00000246 RAX: ffffffff87a2b780 RBX: 0000000000000000 RCX: ffffffff862cd465 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff888106672064 R08: 0000000000000001 R09: ffff8881f6636a6b R10: ffffed103ecc6d4d R11: 0000000000000000 R12: 0000000000000001 R13: ffff888106672000 R14: ffff888106672064 R15: 0000000000000000 acpi_idle_do_entry+0x53/0x70 drivers/acpi/processor_idle.c:573 acpi_idle_enter+0x173/0x290 drivers/acpi/processor_idle.c:711 cpuidle_enter_state+0xd3/0x6f0 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388 cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x2fe/0x3c0 kernel/sched/idle.c:282 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379 rest_init+0x16f/0x2b0 init/main.c:735 arch_call_rest_init+0x13/0x30 init/main.c:834 start_kernel+0x3b1/0x490 init/main.c:1088 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:556 x86_64_start_kernel+0xb3/0xc0 arch/x86/kernel/head64.c:537 secondary_startup_64_no_verify+0xf4/0xfb general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.4.0-rc5-syzkaller-gd37537a1f7cf #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 RIP: 0010:__skb_insert include/linux/skbuff.h:2205 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2311 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2344 [inline] RIP: 0010:skb_queue_tail+0xa2/0x150 net/core/skbuff.c:3745 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc RSP: 0018:ffffc900000079f8 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: ffff888139f0b878 RCX: ffffffff812d6c04 RDX: 0000000000000000 RSI: 0000000000000012 RDI: ffff88813a0b6a08 RBP: ffff88813a0b6a00 R08: 0000000000000001 R09: 0000000000000003 R10: fffff52000000f2d R11: 0000000000000001 R12: 0000000000000000 R13: ffff888139f0b890 R14: 00000000ffffb1b8 R15: ffffffff835b7710 FS: 0000000000000000(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e127000 CR3: 00000001013b4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath9k_htc_txep+0x28b/0x400 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c:712 ath9k_htc_txcompletion_cb+0x1d1/0x2f0 drivers/net/wireless/ath/ath9k/htc_hst.c:353 hif_usb_regout_cb+0x119/0x1d0 drivers/net/wireless/ath/ath9k/hif_usb.c:88 __usb_hcd_giveback_urb+0x2b6/0x5c0 drivers/usb/core/hcd.c:1671 usb_hcd_giveback_urb+0x384/0x430 drivers/usb/core/hcd.c:1754 dummy_timer+0x13b6/0x3400 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0x1a0/0x580 kernel/time/timer.c:1700 expire_timers+0x29b/0x4b0 kernel/time/timer.c:1751 __run_timers kernel/time/timer.c:2022 [inline] __run_timers kernel/time/timer.c:1995 [inline] run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035 __do_softirq+0x1c1/0x8e8 kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu kernel/softirq.c:650 [inline] irq_exit_rcu+0x11b/0x190 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x92/0xc0 arch/x86/kernel/apic/apic.c:1106 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:72 [inline] RIP: 0010:acpi_safe_halt+0x40/0x50 drivers/acpi/processor_idle.c:113 Code: eb 03 83 e3 01 89 de 0f 1f 44 00 00 84 db 75 1b 0f 1f 44 00 00 66 90 0f 1f 44 00 00 0f 00 2d 87 f6 60 00 0f 1f 44 00 00 fb f4 5b c3 cc 0f 1f 00 66 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 0f RSP: 0018:ffffffff87a07d18 EFLAGS: 00000246 RAX: ffffffff87a2b780 RBX: 0000000000000000 RCX: ffffffff862cd465 RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff888106672064 R08: 0000000000000001 R09: ffff8881f6636a6b R10: ffffed103ecc6d4d R11: 0000000000000000 R12: 0000000000000001 R13: ffff888106672000 R14: ffff888106672064 R15: 0000000000000000 acpi_idle_do_entry+0x53/0x70 drivers/acpi/processor_idle.c:573 acpi_idle_enter+0x173/0x290 drivers/acpi/processor_idle.c:711 cpuidle_enter_state+0xd3/0x6f0 drivers/cpuidle/cpuidle.c:267 cpuidle_enter+0x4e/0xa0 drivers/cpuidle/cpuidle.c:388 cpuidle_idle_call kernel/sched/idle.c:215 [inline] do_idle+0x2fe/0x3c0 kernel/sched/idle.c:282 cpu_startup_entry+0x18/0x20 kernel/sched/idle.c:379 rest_init+0x16f/0x2b0 init/main.c:735 arch_call_rest_init+0x13/0x30 init/main.c:834 start_kernel+0x3b1/0x490 init/main.c:1088 x86_64_start_reservations+0x18/0x30 arch/x86/kernel/head64.c:556 x86_64_start_kernel+0xb3/0xc0 arch/x86/kernel/head64.c:537 secondary_startup_64_no_verify+0xf4/0xfb Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__skb_insert include/linux/skbuff.h:2205 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2311 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2344 [inline] RIP: 0010:skb_queue_tail+0xa2/0x150 net/core/skbuff.c:3745 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc RSP: 0018:ffffc900000079f8 EFLAGS: 00010046 RAX: dffffc0000000000 RBX: ffff888139f0b878 RCX: ffffffff812d6c04 RDX: 0000000000000000 RSI: 0000000000000012 RDI: ffff88813a0b6a08 RBP: ffff88813a0b6a00 R08: 0000000000000001 R09: 0000000000000003 R10: fffff52000000f2d R11: 0000000000000001 R12: 0000000000000000 R13: ffff888139f0b890 R14: 00000000ffffb1b8 R15: ffffffff835b7710 FS: 0000000000000000(0000) GS:ffff8881f6600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2e127000 CR3: 00000001013b4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: eb 03 jmp 0x5 2: 83 e3 01 and $0x1,%ebx 5: 89 de mov %ebx,%esi 7: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) c: 84 db test %bl,%bl e: 75 1b jne 0x2b 10: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 15: 66 90 xchg %ax,%ax 17: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 1c: 0f 00 2d 87 f6 60 00 verw 0x60f687(%rip) # 0x60f6aa 23: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 28: fb sti 29: f4 hlt * 2a: fa cli <-- trapping instruction 2b: 5b pop %rbx 2c: c3 retq 2d: cc int3 2e: 0f 1f 00 nopl (%rax) 31: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1) 38: 00 00 3a: 55 push %rbp 3b: 48 89 fd mov %rdi,%rbp 3e: 53 push %rbx 3f: 0f .byte 0xf