INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 6433 Comm: sed Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 assign_lock_key kernel/locking/lockdep.c:951 [inline] register_lock_class+0xf4b/0x1390 kernel/locking/lockdep.c:1263 __lock_acquire+0x149/0x2b00 kernel/locking/lockdep.c:4906 lock_acquire+0x19f/0x4d0 kernel/locking/lockdep.c:5637 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0xd1/0x120 kernel/locking/spinlock.c:162 ath9k_htc_rxep+0x3f/0x1c0 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c:1133 ath9k_hif_usb_reg_in_cb+0x189/0x630 drivers/net/wireless/ath/ath9k/hif_usb.c:733 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:lock_acquire+0x21f/0x4d0 kernel/locking/lockdep.c:5641 Code: 08 4c 89 f7 e8 b2 79 6a 00 f6 84 24 81 00 00 00 02 0f 85 13 02 00 00 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 09 00 00 00 00 43 c7 44 2f 11 RSP: 0000:ffffc90002b0f660 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92000561edc RCX: ffff888031d08a58 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90002b0f7c0 R08: dffffc0000000000 R09: fffffbfff1ff39dd R10: fffffbfff1ff39dd R11: 0000000000000000 R12: 0000000000000246 R13: 1ffff92000561ed4 R14: ffffc90002b0f6e0 R15: dffffc0000000000 rcu_lock_acquire+0x20/0x30 include/linux/rcupdate.h:268 rcu_read_lock include/linux/rcupdate.h:688 [inline] folio_memcg_lock+0x8e/0x4e0 mm/memcontrol.c:2010 page_add_file_rmap+0x187/0x940 mm/rmap.c:1216 do_set_pte+0x467/0x660 mm/memory.c:3980 filemap_map_pages+0x7fb/0xb50 mm/filemap.c:3335 do_fault_around mm/memory.c:4143 [inline] do_read_fault+0x39b/0x650 mm/memory.c:4158 do_fault mm/memory.c:4293 [inline] handle_pte_fault mm/memory.c:4551 [inline] __handle_mm_fault mm/memory.c:4686 [inline] handle_mm_fault+0x1849/0x2560 mm/memory.c:4784 do_user_addr_fault+0x8cc/0x10c0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1485 [inline] exc_page_fault+0xa1/0x1e0 arch/x86/mm/fault.c:1541 asm_exc_page_fault+0x1e/0x30 RIP: 0033:0x7fc6e25e6e70 Code: Unable to access opcode bytes at RIP 0x7fc6e25e6e46. RSP: 002b:00007ffdb017bf58 EFLAGS: 00010206 RAX: 00007fc6e24c81c0 RBX: 0000008e7db79a70 RCX: 0000000000000000 RDX: 00007fc6e25e6e70 RSI: 00007fc6e27670c0 RDI: 0000000000000001 RBP: 00007ffdb017c220 R08: 0000000000000000 R09: 00007fc6e24c81c0 R10: 00000000069682ac R11: 0000000000000206 R12: 0000000000000000 R13: fffffffffffffff8 R14: 00007fc6e27721e0 R15: 00007fc6e27721e0 BUG: unable to handle page fault for address: ffffffffffffffc8 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD c88f067 P4D c88f067 PUD c891067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 6433 Comm: sed Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:ath9k_htc_rxep+0x83/0x1c0 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c:1135 Code: 3c 38 00 74 08 48 89 df e8 ea dd 3d fc 48 8b 1b 48 39 eb 74 36 4c 8d 73 c8 4d 89 f5 49 c1 ed 03 43 0f b6 44 3d 00 84 c0 75 0d <41> 80 3e 00 74 32 e8 f2 01 f2 fb eb c0 44 89 f1 80 e1 07 38 c1 7c RSP: 0000:ffffc900000077c8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076a0 RBP: ffff888079253718 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000ed5 R11: 0000000000000004 R12: ffff888079253728 R13: 1ffffffffffffff9 R14: ffffffffffffffc8 R15: dffffc0000000000 FS: 00007fc6e2415800(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffc8 CR3: 000000002226e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: ath9k_hif_usb_reg_in_cb+0x189/0x630 drivers/net/wireless/ath/ath9k/hif_usb.c:733 __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656 dummy_timer+0x808/0x3150 drivers/usb/gadget/udc/dummy_hcd.c:1987 call_timer_fn+0xf6/0x210 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers+0x71a/0x910 kernel/time/timer.c:1734 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1747 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 __irq_exit_rcu+0xec/0x170 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 RIP: 0010:lock_acquire+0x21f/0x4d0 kernel/locking/lockdep.c:5641 Code: 08 4c 89 f7 e8 b2 79 6a 00 f6 84 24 81 00 00 00 02 0f 85 13 02 00 00 41 f7 c4 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 09 00 00 00 00 43 c7 44 2f 11 RSP: 0000:ffffc90002b0f660 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff92000561edc RCX: ffff888031d08a58 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc90002b0f7c0 R08: dffffc0000000000 R09: fffffbfff1ff39dd R10: fffffbfff1ff39dd R11: 0000000000000000 R12: 0000000000000246 R13: 1ffff92000561ed4 R14: ffffc90002b0f6e0 R15: dffffc0000000000 rcu_lock_acquire+0x20/0x30 include/linux/rcupdate.h:268 rcu_read_lock include/linux/rcupdate.h:688 [inline] folio_memcg_lock+0x8e/0x4e0 mm/memcontrol.c:2010 page_add_file_rmap+0x187/0x940 mm/rmap.c:1216 do_set_pte+0x467/0x660 mm/memory.c:3980 filemap_map_pages+0x7fb/0xb50 mm/filemap.c:3335 do_fault_around mm/memory.c:4143 [inline] do_read_fault+0x39b/0x650 mm/memory.c:4158 do_fault mm/memory.c:4293 [inline] handle_pte_fault mm/memory.c:4551 [inline] __handle_mm_fault mm/memory.c:4686 [inline] handle_mm_fault+0x1849/0x2560 mm/memory.c:4784 do_user_addr_fault+0x8cc/0x10c0 arch/x86/mm/fault.c:1397 handle_page_fault arch/x86/mm/fault.c:1485 [inline] exc_page_fault+0xa1/0x1e0 arch/x86/mm/fault.c:1541 asm_exc_page_fault+0x1e/0x30 RIP: 0033:0x7fc6e25e6e70 Code: Unable to access opcode bytes at RIP 0x7fc6e25e6e46. RSP: 002b:00007ffdb017bf58 EFLAGS: 00010206 RAX: 00007fc6e24c81c0 RBX: 0000008e7db79a70 RCX: 0000000000000000 RDX: 00007fc6e25e6e70 RSI: 00007fc6e27670c0 RDI: 0000000000000001 RBP: 00007ffdb017c220 R08: 0000000000000000 R09: 00007fc6e24c81c0 R10: 00000000069682ac R11: 0000000000000206 R12: 0000000000000000 R13: fffffffffffffff8 R14: 00007fc6e27721e0 R15: 00007fc6e27721e0 Modules linked in: CR2: ffffffffffffffc8 ---[ end trace f67541b1d52a9f2b ]--- RIP: 0010:ath9k_htc_rxep+0x83/0x1c0 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c:1135 Code: 3c 38 00 74 08 48 89 df e8 ea dd 3d fc 48 8b 1b 48 39 eb 74 36 4c 8d 73 c8 4d 89 f5 49 c1 ed 03 43 0f b6 44 3d 00 84 c0 75 0d <41> 80 3e 00 74 32 e8 f2 01 f2 fb eb c0 44 89 f1 80 e1 07 38 c1 7c RSP: 0000:ffffc900000077c8 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900000076a0 RBP: ffff888079253718 R08: dffffc0000000000 R09: 0000000000000003 R10: fffff52000000ed5 R11: 0000000000000004 R12: ffff888079253728 R13: 1ffffffffffffff9 R14: ffffffffffffffc8 R15: dffffc0000000000 FS: 00007fc6e2415800(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc6e25e6e46 CR3: 000000002226e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 ---------------- Code disassembly (best guess): 0: 08 4c 89 f7 or %cl,-0x9(%rcx,%rcx,4) 4: e8 b2 79 6a 00 callq 0x6a79bb 9: f6 84 24 81 00 00 00 testb $0x2,0x81(%rsp) 10: 02 11: 0f 85 13 02 00 00 jne 0x22a 17: 41 f7 c4 00 02 00 00 test $0x200,%r12d 1e: 74 01 je 0x21 20: fb sti 21: 48 c7 44 24 40 0e 36 movq $0x45e0360e,0x40(%rsp) 28: e0 45 * 2a: 4b c7 04 2f 00 00 00 movq $0x0,(%r15,%r13,1) <-- trapping instruction 31: 00 32: 43 c7 44 2f 09 00 00 movl $0x0,0x9(%r15,%r13,1) 39: 00 00 3b: 43 rex.XB 3c: c7 .byte 0xc7 3d: 44 2f rex.R (bad) 3f: 11 .byte 0x11