INFO: trying to register non-static key.
the code is fine but needs lockdep annotation.
turning off the locking correctness validator.
CPU: 1 PID: 6303 Comm: dhcpcd-run-hook Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
Call Trace:
__dump_stack lib/dump_stack.c:79 [inline]
dump_stack+0x9a/0xcc lib/dump_stack.c:120
assign_lock_key kernel/locking/lockdep.c:935 [inline]
register_lock_class+0x1041/0x1100 kernel/locking/lockdep.c:1247
__lock_acquire+0x100/0x57d0 kernel/locking/lockdep.c:4711
lock_acquire kernel/locking/lockdep.c:5442 [inline]
lock_acquire+0x1a8/0x720 kernel/locking/lockdep.c:5407
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0x39/0x50 kernel/locking/spinlock.c:159
skb_queue_tail+0x1c/0x130 net/core/skbuff.c:3161
hif_usb_regout_cb+0xf6/0x1a0 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1656
dummy_timer+0xeb8/0x2eb0 drivers/usb/gadget/udc/dummy_hcd.c:1971
call_timer_fn+0x163/0x4b0 kernel/time/timer.c:1417
expire_timers kernel/time/timer.c:1462 [inline]
__run_timers.part.0+0x52a/0x8b0 kernel/time/timer.c:1731
__run_timers kernel/time/timer.c:1712 [inline]
run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1744
__do_softirq+0x29b/0x9f6 kernel/softirq.c:343
asm_call_irq_on_stack+0xf/0x20
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:226 [inline]
__irq_exit_rcu kernel/softirq.c:420 [inline]
irq_exit_rcu+0x134/0x200 kernel/softirq.c:432
sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1100
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629
RIP: 0010:lock_page_memcg+0x1b5/0x4f0 mm/memcontrol.c:2185
Code: 41 b8 01 00 00 00 4c 89 f7 e8 47 ba ab ff 58 48 c7 c6 d6 90 a4 81 4c 89 f7 e8 27 b3 ab ff 4d 85 ff 0f 85 2e 01 00 00 41 55 9d <4c> 8d ab c0 0b 00 00 be 04 00 00 00 4c 89 ef e8 27 b6 fb ff 4c 89
RSP: 0000:ffffc90001bafbb8 EFLAGS: 00000286
RAX: 00000000000004f1 RBX: ffff888140742000 RCX: ffffffff814fc59e
RDX: 0000000000000000 RSI: ffffffff888ad5e0 RDI: ffffffff88ddad60
RBP: ffffc90001bafc18 R08: 0000000000000001 R09: ffffffff8e0ff7f7
R10: fffffbfff1c1fefe R11: 0000000000000001 R12: dffffc0000000000
R13: 0000000000000286 R14: ffff888140742688 R15: 0000000000000200
page_remove_rmap+0x1d/0xcd0 mm/rmap.c:1334
wp_page_copy+0x8a6/0x1ce0 mm/memory.c:2936
handle_pte_fault mm/memory.c:4405 [inline]
__handle_mm_fault mm/memory.c:4522 [inline]
handle_mm_fault+0x2330/0x4520 mm/memory.c:4620
do_user_addr_fault+0x2d3/0x930 arch/x86/mm/fault.c:1393
handle_page_fault arch/x86/mm/fault.c:1450 [inline]
exc_page_fault+0x60/0xc0 arch/x86/mm/fault.c:1506
asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:580
RIP: 0033:0x7f6755a0fdee
Code: e8 ff ff 66 0f 1f 84 00 00 00 00 00 41 57 49 89 d7 41 56 41 55 41 54 55 48 89 fd 53 48 81 ec f8 04 00 00 48 8b 05 6a 00 15 00 <48> 89 34 24 89 4c 24 48 64 8b 00 89 84 24 80 00 00 00 8b 87 c0 00
RSP: 002b:00007ffdfc960dd0 EFLAGS: 00010202
RAX: ffffffffffffff88 RBX: 00000000ffffffff RCX: 0000000000000000
RDX: 00007ffdfc961310 RSI: 00007f6755c1e1e3 RDI: 00007f6755b61520
RBP: 00007f6755b61520 R08: 0000563555db8e3d R09: 00007f6755b60a60
R10: 0000563555daf410 R11: 0000000000000000 R12: 0000000000000001
R13: 00007ffdfc9613f8 R14: 0000000000000000 R15: 00007ffdfc961310
general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 6303 Comm: dhcpcd-run-hook Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:__skb_insert include/linux/skbuff.h:1916 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2022 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2055 [inline]
RIP: 0010:skb_queue_tail+0x95/0x130 net/core/skbuff.c:3162
Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
RSP: 0000:ffffc90000db0ad8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88801d25b648 RCX: ffffffff8150f5d0
RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffff8880107aadc8
RBP: ffff8880107aadc0 R08: 0000000000000001 R09: 0000000000000003
R10: fffff520001b6149 R11: 3030303030302052 R12: 0000000000000000
R13: ffff88801d25b660 R14: ffffffff8b67d960 R15: ffff888019803200
FS: 00007f6755904800(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdfc960dd0 CR3: 0000000026de2000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
hif_usb_regout_cb+0xf6/0x1a0 drivers/net/wireless/ath/ath9k/hif_usb.c:90
__usb_hcd_giveback_urb+0x238/0x3f0 drivers/usb/core/hcd.c:1656
dummy_timer+0xeb8/0x2eb0 drivers/usb/gadget/udc/dummy_hcd.c:1971
call_timer_fn+0x163/0x4b0 kernel/time/timer.c:1417
expire_timers kernel/time/timer.c:1462 [inline]
__run_timers.part.0+0x52a/0x8b0 kernel/time/timer.c:1731
__run_timers kernel/time/timer.c:1712 [inline]
run_timer_softirq+0x9c/0x190 kernel/time/timer.c:1744
__do_softirq+0x29b/0x9f6 kernel/softirq.c:343
asm_call_irq_on_stack+0xf/0x20
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0xaa/0xd0 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:226 [inline]
__irq_exit_rcu kernel/softirq.c:420 [inline]
irq_exit_rcu+0x134/0x200 kernel/softirq.c:432
sysvec_apic_timer_interrupt+0x4d/0x100 arch/x86/kernel/apic/apic.c:1100
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:629
RIP: 0010:lock_page_memcg+0x1b5/0x4f0 mm/memcontrol.c:2185
Code: 41 b8 01 00 00 00 4c 89 f7 e8 47 ba ab ff 58 48 c7 c6 d6 90 a4 81 4c 89 f7 e8 27 b3 ab ff 4d 85 ff 0f 85 2e 01 00 00 41 55 9d <4c> 8d ab c0 0b 00 00 be 04 00 00 00 4c 89 ef e8 27 b6 fb ff 4c 89
RSP: 0000:ffffc90001bafbb8 EFLAGS: 00000286
RAX: 00000000000004f1 RBX: ffff888140742000 RCX: ffffffff814fc59e
RDX: 0000000000000000 RSI: ffffffff888ad5e0 RDI: ffffffff88ddad60
RBP: ffffc90001bafc18 R08: 0000000000000001 R09: ffffffff8e0ff7f7
R10: fffffbfff1c1fefe R11: 0000000000000001 R12: dffffc0000000000
R13: 0000000000000286 R14: ffff888140742688 R15: 0000000000000200
page_remove_rmap+0x1d/0xcd0 mm/rmap.c:1334
wp_page_copy+0x8a6/0x1ce0 mm/memory.c:2936
handle_pte_fault mm/memory.c:4405 [inline]
__handle_mm_fault mm/memory.c:4522 [inline]
handle_mm_fault+0x2330/0x4520 mm/memory.c:4620
do_user_addr_fault+0x2d3/0x930 arch/x86/mm/fault.c:1393
handle_page_fault arch/x86/mm/fault.c:1450 [inline]
exc_page_fault+0x60/0xc0 arch/x86/mm/fault.c:1506
asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:580
RIP: 0033:0x7f6755a0fdee
Code: e8 ff ff 66 0f 1f 84 00 00 00 00 00 41 57 49 89 d7 41 56 41 55 41 54 55 48 89 fd 53 48 81 ec f8 04 00 00 48 8b 05 6a 00 15 00 <48> 89 34 24 89 4c 24 48 64 8b 00 89 84 24 80 00 00 00 8b 87 c0 00
RSP: 002b:00007ffdfc960dd0 EFLAGS: 00010202
RAX: ffffffffffffff88 RBX: 00000000ffffffff RCX: 0000000000000000
RDX: 00007ffdfc961310 RSI: 00007f6755c1e1e3 RDI: 00007f6755b61520
RBP: 00007f6755b61520 R08: 0000563555db8e3d R09: 00007f6755b60a60
R10: 0000563555daf410 R11: 0000000000000000 R12: 0000000000000001
R13: 00007ffdfc9613f8 R14: 0000000000000000 R15: 00007ffdfc961310
Modules linked in:
---[ end trace b2308cc557b53aef ]---
RIP: 0010:__skb_insert include/linux/skbuff.h:1916 [inline]
RIP: 0010:__skb_queue_before include/linux/skbuff.h:2022 [inline]
RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2055 [inline]
RIP: 0010:skb_queue_tail+0x95/0x130 net/core/skbuff.c:3162
Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 7b 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4a 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc
RSP: 0000:ffffc90000db0ad8 EFLAGS: 00010046
RAX: dffffc0000000000 RBX: ffff88801d25b648 RCX: ffffffff8150f5d0
RDX: 0000000000000000 RSI: 0000000000000096 RDI: ffff8880107aadc8
RBP: ffff8880107aadc0 R08: 0000000000000001 R09: 0000000000000003
R10: fffff520001b6149 R11: 3030303030302052 R12: 0000000000000000
R13: ffff88801d25b660 R14: ffffffff8b67d960 R15: ffff888019803200
FS: 00007f6755904800(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdfc960dd0 CR3: 0000000026de2000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 41 b8 01 00 00 00 mov $0x1,%r8d
6: 4c 89 f7 mov %r14,%rdi
9: e8 47 ba ab ff callq 0xffabba55
e: 58 pop %rax
f: 48 c7 c6 d6 90 a4 81 mov $0xffffffff81a490d6,%rsi
16: 4c 89 f7 mov %r14,%rdi
19: e8 27 b3 ab ff callq 0xffabb345
1e: 4d 85 ff test %r15,%r15
21: 0f 85 2e 01 00 00 jne 0x155
27: 41 55 push %r13
29: 9d popfq
* 2a: 4c 8d ab c0 0b 00 00 lea 0xbc0(%rbx),%r13 <-- trapping instruction
31: be 04 00 00 00 mov $0x4,%esi
36: 4c 89 ef mov %r13,%rdi
39: e8 27 b6 fb ff callq 0xfffbb665
3e: 4c rex.WR
3f: 89 .byte 0x89