BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 1b036c067 P4D 1b036c067 PUD 1b036d067 PMD 0
Oops: 0000 [#1] SMP KASAN
CPU: 0 PID: 3116 Comm: kworker/0:4 Not tainted 5.7.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:__read_once_size include/linux/compiler.h:199 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x43/0x60 kernel/kcov.c:202
Code: 24 74 0f 80 e6 01 74 35 8b 90 2c 13 00 00 85 d2 74 2b 8b 90 08 13 00 00 83 fa 02 75 20 48 8b 88 10 13 00 00 8b 80 0c 13 00 00 <48> 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 66 0f
RSP: 0018:ffff8881ac2ef5c8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff836d1544 RDI: ffff8881d48a6b7c
RBP: ffff8881c57d0200 R08: 0000000000000001 R09: fffffbfff126c8c6
R10: ffffffff8936462f R11: fffffbfff126c8c5 R12: 0000000000000004
R13: ffff8881d4ac5000 R14: 0000000000000000 R15: ffff8881d3bb54c0
FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000001b036b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
usb_hcd_submit_urb+0x2c4/0x2120 drivers/usb/core/hcd.c:1563
usb_submit_urb+0x6e5/0x1460 drivers/usb/core/urb.c:570
usb_start_wait_urb+0x101/0x4c0 drivers/usb/core/message.c:58
usb_internal_control_msg drivers/usb/core/message.c:102 [inline]
usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153
get_port_status drivers/usb/core/hub.c:573 [inline]
hub_ext_port_status+0x125/0x460 drivers/usb/core/hub.c:590
hub_port_status drivers/usb/core/hub.c:612 [inline]
hub_port_debounce+0x18c/0x350 drivers/usb/core/hub.c:4409
hub_port_debounce_be_stable drivers/usb/core/hub.h:164 [inline]
hub_port_connect drivers/usb/core/hub.c:5071 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5348 [inline]
port_event drivers/usb/core/hub.c:5494 [inline]
hub_event+0x2c63/0x43c0 drivers/usb/core/hub.c:5576
process_one_work+0x965/0x1630 kernel/workqueue.c:2268
process_scheduled_works kernel/workqueue.c:2330 [inline]
worker_thread+0x7ab/0xe20 kernel/workqueue.c:2416
kthread+0x326/0x430 kernel/kthread.c:268
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351
Modules linked in:
CR2: 0000000000000000
---[ end trace 263abb92dde2f479 ]---
RIP: 0010:__read_once_size include/linux/compiler.h:199 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x43/0x60 kernel/kcov.c:202
Code: 24 74 0f 80 e6 01 74 35 8b 90 2c 13 00 00 85 d2 74 2b 8b 90 08 13 00 00 83 fa 02 75 20 48 8b 88 10 13 00 00 8b 80 0c 13 00 00 <48> 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 66 0f
RSP: 0018:ffff8881ac2ef5c8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000002 RSI: ffffffff836d1544 RDI: ffff8881d48a6b7c
RBP: ffff8881c57d0200 R08: 0000000000000001 R09: fffffbfff126c8c6
R10: ffffffff8936462f R11: fffffbfff126c8c5 R12: 0000000000000004
R13: ffff8881d4ac5000 R14: 0000000000000000 R15: ffff8881d3bb54c0
FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000001b036b000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400