INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 4502 Comm: kworker/0:10 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 assign_lock_key kernel/locking/lockdep.c:951 [inline] register_lock_class+0xf4b/0x1390 kernel/locking/lockdep.c:1263 __lock_acquire+0x149/0x2b00 kernel/locking/lockdep.c:4906 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5639 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 skb_queue_tail+0x32/0x120 net/core/skbuff.c:3341 hif_usb_regout_cb+0x12a/0x160 drivers/net/wireless/ath/ath9k/hif_usb.c:90 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1670 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:console_unlock+0xc88/0xe90 kernel/printk/printk.c:2716 Code: 00 e9 71 fa ff ff e8 b7 a8 1a 00 e8 72 d4 a7 08 48 83 7c 24 38 00 74 dd 66 2e 0f 1f 84 00 00 00 00 00 e8 9b a8 1a 00 fb 31 ff <44> 89 f6 e8 a0 ac 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 0f RSP: 0018:ffffc9000ff8efe0 EFLAGS: 00000246 RAX: ffffffff816b04f5 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000f1af000 RSI: 0000000000001cf0 RDI: 0000000000000000 RBP: ffffc9000ff8f1f0 R08: ffffffff816b04ac R09: fffffbfff1ffc3c5 R10: fffffbfff1ffc3c5 R11: 0000000000000000 R12: ffffffff8d3fb9e8 R13: ffffffff8d3fb9b0 R14: 0000000000000000 R15: ffffc9000ff8f060 vprintk_emit+0xba/0x140 kernel/printk/printk.c:2245 dev_vprintk_emit+0x2e4/0x35d drivers/base/core.c:4604 dev_printk_emit+0xd9/0x118 drivers/base/core.c:4615 _dev_info+0x11e/0x165 drivers/base/core.c:4673 usb_disconnect+0xde/0x8a0 drivers/usb/core/hub.c:2210 hub_port_connect+0x29c/0x2910 drivers/usb/core/hub.c:5202 hub_port_connect_change+0x5f9/0xc20 drivers/usb/core/hub.c:5502 port_event+0xca0/0x13e0 drivers/usb/core/hub.c:5660 hub_event+0x4ed/0xe40 drivers/usb/core/hub.c:5742 process_one_work+0x850/0x1130 kernel/workqueue.c:2307 worker_thread+0xab1/0x1300 kernel/workqueue.c:2454 kthread+0x2a3/0x2d0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 4502 Comm: kworker/0:10 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event RIP: 0010:__skb_insert include/linux/skbuff.h:2011 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2117 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2150 [inline] RIP: 0010:skb_queue_tail+0xb8/0x120 net/core/skbuff.c:3342 Code: 96 b8 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 82 96 b8 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 69 96 b8 f9 49 89 5d 00 49 83 c4 RSP: 0018:ffffc90000007808 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff888038ea3dc0 RCX: dffffc0000000000 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0 RBP: 1ffff11004c50734 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000edd R11: 0000000000000004 R12: ffff888026283998 R13: 0000000000000000 R14: ffff8880262839a0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f66122ad118 CR3: 000000000c88e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hif_usb_regout_cb+0x12a/0x160 drivers/net/wireless/ath/ath9k/hif_usb.c:90 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1670 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:console_unlock+0xc88/0xe90 kernel/printk/printk.c:2716 Code: 00 e9 71 fa ff ff e8 b7 a8 1a 00 e8 72 d4 a7 08 48 83 7c 24 38 00 74 dd 66 2e 0f 1f 84 00 00 00 00 00 e8 9b a8 1a 00 fb 31 ff <44> 89 f6 e8 a0 ac 1a 00 31 db 45 85 f6 0f 95 c0 89 c1 0a 4c 24 0f RSP: 0018:ffffc9000ff8efe0 EFLAGS: 00000246 RAX: ffffffff816b04f5 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000f1af000 RSI: 0000000000001cf0 RDI: 0000000000000000 RBP: ffffc9000ff8f1f0 R08: ffffffff816b04ac R09: fffffbfff1ffc3c5 R10: fffffbfff1ffc3c5 R11: 0000000000000000 R12: ffffffff8d3fb9e8 R13: ffffffff8d3fb9b0 R14: 0000000000000000 R15: ffffc9000ff8f060 vprintk_emit+0xba/0x140 kernel/printk/printk.c:2245 dev_vprintk_emit+0x2e4/0x35d drivers/base/core.c:4604 dev_printk_emit+0xd9/0x118 drivers/base/core.c:4615 _dev_info+0x11e/0x165 drivers/base/core.c:4673 usb_disconnect+0xde/0x8a0 drivers/usb/core/hub.c:2210 hub_port_connect+0x29c/0x2910 drivers/usb/core/hub.c:5202 hub_port_connect_change+0x5f9/0xc20 drivers/usb/core/hub.c:5502 port_event+0xca0/0x13e0 drivers/usb/core/hub.c:5660 hub_event+0x4ed/0xe40 drivers/usb/core/hub.c:5742 process_one_work+0x850/0x1130 kernel/workqueue.c:2307 worker_thread+0xab1/0x1300 kernel/workqueue.c:2454 kthread+0x2a3/0x2d0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__skb_insert include/linux/skbuff.h:2011 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2117 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2150 [inline] RIP: 0010:skb_queue_tail+0xb8/0x120 net/core/skbuff.c:3342 Code: 96 b8 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 82 96 b8 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 69 96 b8 f9 49 89 5d 00 49 83 c4 RSP: 0018:ffffc90000007808 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff888038ea3dc0 RCX: dffffc0000000000 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0 RBP: 1ffff11004c50734 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000edd R11: 0000000000000004 R12: ffff888026283998 R13: 0000000000000000 R14: ffff8880262839a0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f66122ad118 CR3: 000000000c88e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: e9 71 fa ff ff jmpq 0xfffffa76 5: e8 b7 a8 1a 00 callq 0x1aa8c1 a: e8 72 d4 a7 08 callq 0x8a7d481 f: 48 83 7c 24 38 00 cmpq $0x0,0x38(%rsp) 15: 74 dd je 0xfffffff4 17: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1) 1e: 00 00 00 21: e8 9b a8 1a 00 callq 0x1aa8c1 26: fb sti 27: 31 ff xor %edi,%edi * 29: 44 89 f6 mov %r14d,%esi <-- trapping instruction 2c: e8 a0 ac 1a 00 callq 0x1aacd1 31: 31 db xor %ebx,%ebx 33: 45 85 f6 test %r14d,%r14d 36: 0f 95 c0 setne %al 39: 89 c1 mov %eax,%ecx 3b: 0a 4c 24 0f or 0xf(%rsp),%cl