vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) vhci_hcd vhci_hcd.0: Device attached INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 0 PID: 3686 Comm: kworker/0:2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Workqueue: events sco_sock_timeout Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:728 [inline] register_lock_class+0xe82/0x11c0 kernel/locking/lockdep.c:754 __lock_acquire+0x17d/0x3ff0 kernel/locking/lockdep.c:3304 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:329 [inline] sco_sock_timeout+0x7b/0x1b0 net/bluetooth/sco.c:95 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 usb 19-1: new high-speed USB device number 2 using vhci_hcd PGD a2907067 P4D a2907067 PUD 0 Oops: 0010 [#1] PREEMPT SMP KASAN CPU: 0 PID: 3686 Comm: kworker/0:2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Workqueue: events sco_sock_timeout RIP: 0010: (null) Code: Bad RIP value. RSP: 0018:ffff8880a8bdfd20 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff814bdebb RDX: 1ffff110116536c8 RSI: 0000000000000004 RDI: ffff88808b29b200 RBP: ffff88808b29b200 R08: 0000000000000001 R09: ffffed1011653651 R10: ffff88808b29b28b R11: 0000000000074071 R12: ffff88808b29b288 R13: ffff8880a8f14300 R14: ffff8880ba02a8c0 R15: ffff8880ba02f000 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000009562c000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: sco_sock_timeout+0xd8/0x1b0 net/bluetooth/sco.c:97 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Modules linked in: CR2: 0000000000000000 ---[ end trace ace245f66bb85d78 ]--- RIP: 0010: (null) Code: Bad RIP value. RSP: 0018:ffff8880a8bdfd20 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff814bdebb RDX: 1ffff110116536c8 RSI: 0000000000000004 RDI: ffff88808b29b200 RBP: ffff88808b29b200 R08: 0000000000000001 R09: ffffed1011653651 R10: ffff88808b29b28b R11: 0000000000074071 R12: ffff88808b29b288 R13: ffff8880a8f14300 R14: ffff8880ba02a8c0 R15: ffff8880ba02f000 FS: 0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 000000009562c000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400