INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 assign_lock_key kernel/locking/lockdep.c:951 [inline] register_lock_class+0xf4b/0x1390 kernel/locking/lockdep.c:1263 __lock_acquire+0x149/0x2b00 kernel/locking/lockdep.c:4906 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5639 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 skb_queue_tail+0x32/0x120 net/core/skbuff.c:3341 hif_usb_regout_cb+0x12a/0x160 drivers/net/wireless/ath/ath9k/hif_usb.c:90 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1670 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf5/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline] RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:116 [inline] RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:556 [inline] RIP: 0010:acpi_idle_enter+0x42d/0x790 drivers/acpi/processor_idle.c:692 Code: fd 48 83 e3 08 44 8b 7c 24 04 0f 85 22 01 00 00 4c 8d 74 24 40 e8 d3 ab 0d fd eb 0c e8 bc 05 07 fd 0f 00 2d 25 85 64 06 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 23 00 74 08 4c 89 f7 e8 ad b5 53 fd RSP: 0018:ffffffff8c807ba0 EFLAGS: 00000286 RAX: 889831b6788a4e00 RBX: 0000000000000000 RCX: ffffffff90bf6803 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff8c807c50 R08: ffffffff818c4030 R09: fffffbfff19176d9 R10: fffffbfff19176d9 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8880125a0864 R14: ffffffff8c807be0 R15: 0000000000000001 cpuidle_enter_state+0x507/0xea0 drivers/cpuidle/cpuidle.c:237 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351 call_cpuidle kernel/sched/idle.c:158 [inline] cpuidle_idle_call kernel/sched/idle.c:239 [inline] do_idle+0x3e8/0x670 kernel/sched/idle.c:306 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403 start_kernel+0x4bf/0x56e init/main.c:1138 secondary_startup_64_no_verify+0xc4/0xcb general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__skb_insert include/linux/skbuff.h:2011 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2117 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2150 [inline] RIP: 0010:skb_queue_tail+0xb8/0x120 net/core/skbuff.c:3342 Code: 5a b1 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 92 5a b1 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 79 5a b1 f9 49 89 5d 00 49 83 c4 RSP: 0018:ffffc90000007808 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff88807e9ca780 RCX: dffffc0000000000 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0 RBP: 1ffff1100e8eb708 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000edd R11: 0000000000000004 R12: ffff88807475b838 R13: 0000000000000000 R14: ffff88807475b840 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007efefc9754b8 CR3: 000000001db15000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: hif_usb_regout_cb+0x12a/0x160 drivers/net/wireless/ath/ath9k/hif_usb.c:90 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1670 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf5/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:22 [inline] RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline] RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:130 [inline] RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:116 [inline] RIP: 0010:acpi_idle_do_entry drivers/acpi/processor_idle.c:556 [inline] RIP: 0010:acpi_idle_enter+0x42d/0x790 drivers/acpi/processor_idle.c:692 Code: fd 48 83 e3 08 44 8b 7c 24 04 0f 85 22 01 00 00 4c 8d 74 24 40 e8 d3 ab 0d fd eb 0c e8 bc 05 07 fd 0f 00 2d 25 85 64 06 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 23 00 74 08 4c 89 f7 e8 ad b5 53 fd RSP: 0018:ffffffff8c807ba0 EFLAGS: 00000286 RAX: 889831b6788a4e00 RBX: 0000000000000000 RCX: ffffffff90bf6803 RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffffff8c807c50 R08: ffffffff818c4030 R09: fffffbfff19176d9 R10: fffffbfff19176d9 R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8880125a0864 R14: ffffffff8c807be0 R15: 0000000000000001 cpuidle_enter_state+0x507/0xea0 drivers/cpuidle/cpuidle.c:237 cpuidle_enter+0x59/0x90 drivers/cpuidle/cpuidle.c:351 call_cpuidle kernel/sched/idle.c:158 [inline] cpuidle_idle_call kernel/sched/idle.c:239 [inline] do_idle+0x3e8/0x670 kernel/sched/idle.c:306 cpu_startup_entry+0x15/0x20 kernel/sched/idle.c:403 start_kernel+0x4bf/0x56e init/main.c:1138 secondary_startup_64_no_verify+0xc4/0xcb Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__skb_insert include/linux/skbuff.h:2011 [inline] RIP: 0010:__skb_queue_before include/linux/skbuff.h:2117 [inline] RIP: 0010:__skb_queue_tail include/linux/skbuff.h:2150 [inline] RIP: 0010:skb_queue_tail+0xb8/0x120 net/core/skbuff.c:3342 Code: 5a b1 f9 4d 89 2f 49 bf 00 00 00 00 00 fc ff df 42 80 7c 3d 00 00 74 08 4c 89 f7 e8 92 5a b1 f9 49 89 1e 4c 89 e8 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 ef e8 79 5a b1 f9 49 89 5d 00 49 83 c4 RSP: 0018:ffffc90000007808 EFLAGS: 00010046 RAX: 0000000000000000 RBX: ffff88807e9ca780 RCX: dffffc0000000000 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076e0 RBP: 1ffff1100e8eb708 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000edd R11: 0000000000000004 R12: ffff88807475b838 R13: 0000000000000000 R14: ffff88807475b840 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007efefc9754b8 CR3: 000000001db15000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: fd std 1: 48 83 e3 08 and $0x8,%rbx 5: 44 8b 7c 24 04 mov 0x4(%rsp),%r15d a: 0f 85 22 01 00 00 jne 0x132 10: 4c 8d 74 24 40 lea 0x40(%rsp),%r14 15: e8 d3 ab 0d fd callq 0xfd0dabed 1a: eb 0c jmp 0x28 1c: e8 bc 05 07 fd callq 0xfd0705dd 21: 0f 00 2d 25 85 64 06 verw 0x6648525(%rip) # 0x664854d 28: fb sti 29: f4 hlt * 2a: 4c 89 f3 mov %r14,%rbx <-- trapping instruction 2d: 48 c1 eb 03 shr $0x3,%rbx 31: 42 80 3c 23 00 cmpb $0x0,(%rbx,%r12,1) 36: 74 08 je 0x40 38: 4c 89 f7 mov %r14,%rdi 3b: e8 ad b5 53 fd callq 0xfd53b5ed