Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. syzkaller login: [ 67.871998][ T8469] IPVS: ftp: loaded support on port[0] = 21 [ 67.974130][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 68.028187][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.036288][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.045039][ T8469] device bridge_slave_0 entered promiscuous mode [ 68.054643][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.062791][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.071350][ T8469] device bridge_slave_1 entered promiscuous mode [ 68.092028][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.102870][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.125267][ T8469] team0: Port device team_slave_0 added [ 68.132656][ T8469] team0: Port device team_slave_1 added [ 68.150247][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.157207][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.184306][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.196943][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.203970][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.229962][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.258678][ T8469] device hsr_slave_0 entered promiscuous mode [ 68.265414][ T8469] device hsr_slave_1 entered promiscuous mode [ 68.368480][ T8469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.378698][ T8469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.389175][ T8469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.400298][ T8469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.424960][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.432157][ T8469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.440185][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.447266][ T8469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.495662][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.511619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.523654][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.532312][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.541198][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.554885][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.567714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.577260][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.584405][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.611853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.621326][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.628380][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.637193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.646447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.656052][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.668413][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.682619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.694824][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.713746][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.721723][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.735211][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.755082][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.776941][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.786159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.795086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.807790][ T8469] device veth0_vlan entered promiscuous mode [ 68.821767][ T8469] device veth1_vlan entered promiscuous mode [ 68.843905][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.851974][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.860678][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.872425][ T8469] device veth0_macvtap entered promiscuous mode [ 68.883925][ T8469] device veth1_macvtap entered promiscuous mode [ 68.903011][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.911265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.922627][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.935024][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.943586][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.955472][ T8469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.968866][ T8469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.978208][ T8469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.987115][ T8469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081912][ T260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.109032][ T260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 69.142070][ T8426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.150685][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.151209][ T8426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.179042][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.489171][ T4905] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.739009][ T4905] usb 1-1: Using ep0 maxpacket: 8 [ 69.859141][ T4905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.869664][ T4905] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.039277][ T4905] usb 1-1: New USB device found, idVendor=17e9, idProduct=9077, bcdDevice=f2.e1 [ 70.048367][ T4905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.056714][ T4905] usb 1-1: Product: syz [ 70.061085][ T4905] usb 1-1: Manufacturer: syz [ 70.065683][ T4905] usb 1-1: SerialNumber: syz [ 70.074885][ T4905] usb 1-1: config 0 descriptor?? [ 70.419058][ T4905] udlfb 1-1:0.0: vendor descriptor not available (-71) [ 70.438994][ T4905] usb 1-1: Read EDID byte 0 failed: -71 [ 70.459370][ T4905] usb 1-1: Read EDID byte 0 failed: -71 [ 70.479118][ T4905] usb 1-1: Read EDID byte 0 failed: -71 [ 70.484765][ T4905] usb 1-1: Unable to get valid EDID from device/display [ 70.532846][ T4905] usb 1-1: submit urb error: -2 [ 70.552059][ T4905] udlfb: probe of 1-1:0.0 failed with error -2 [ 70.619038][ T4905] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 70.627578][ T4905] [drm:udl_init.cold] *ERROR* Unrecognized vendor firmware descriptor [ 70.659234][ T4905] [drm:udl_init] *ERROR* Selecting channel failed [ 70.684316][ T4905] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 70.710301][ T4905] [drm] Initialized udl on minor 2 [ 70.729172][ T4905] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 70.738311][ T4905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 70.754002][ T4905] usb 1-1: USB disconnect, device number 2 [ 70.768426][ T8] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.781093][ T4905] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 70.792854][ T4905] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 70.801268][ T4905] CPU: 1 PID: 4905 Comm: kworker/1:3 Not tainted 5.11.0-rc2-syzkaller #0 [ 70.809683][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.819724][ T4905] Workqueue: usb_hub_wq hub_event [ 70.824733][ T4905] RIP: 0010:drm_client_buffer_vunmap+0x26/0x50 [ 70.830872][ T4905] Code: 00 00 00 00 53 48 89 fb 48 83 ec 08 e8 63 05 3f fd 48 8d 7b 10 48 b8 00 00 00 00 00 fc ff df 48 8d 73 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 0e 48 8b 7b 10 48 83 c4 08 5b e9 66 61 f7 ff 48 89 [ 70.850515][ T4905] RSP: 0018:ffffc900013ef710 EFLAGS: 00010202 [ 70.856567][ T4905] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.864524][ T4905] RDX: 0000000000000002 RSI: 0000000000000018 RDI: 0000000000000010 [ 70.872480][ T4905] RBP: ffff8880242608c8 R08: 0000000000000000 R09: ffff888024260a17 [ 70.880432][ T4905] R10: ffffed100484c142 R11: 0000000000000000 R12: 0000000000000000 [ 70.888426][ T4905] R13: ffff8880242608d8 R14: ffff888024260810 R15: dead000000000100 [ 70.896376][ T4905] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 70.905283][ T4905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.911845][ T4905] CR2: 00007f426474f000 CR3: 000000001bd1b000 CR4: 00000000001506e0 [ 70.919797][ T4905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.927744][ T4905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.935698][ T4905] Call Trace: [ 70.938956][ T4905] drm_fbdev_cleanup+0x380/0x440 [ 70.943881][ T4905] ? drm_fbdev_cleanup+0x440/0x440 [ 70.948993][ T4905] drm_fbdev_client_unregister+0x61/0x80 [ 70.954616][ T4905] drm_client_dev_unregister+0x239/0x3b0 [ 70.960232][ T4905] drm_dev_unregister+0xe9/0x2b0 [ 70.965149][ T4905] usb_unbind_interface+0x1d8/0x8d0 [ 70.970329][ T4905] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 70.976030][ T4905] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 70.981568][ T4905] ? usb_unbind_device+0x1a0/0x1a0 [ 70.986660][ T4905] __device_release_driver+0x3bd/0x6f0 [ 70.992095][ T4905] device_release_driver+0x26/0x40 [ 70.997182][ T4905] bus_remove_device+0x2eb/0x5a0 [ 71.002119][ T4905] device_del+0x502/0xd40 [ 71.006428][ T4905] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 71.012734][ T4905] ? pm_runtime_barrier+0xdc/0x1a0 [ 71.017842][ T4905] usb_disable_device+0x35b/0x7b0 [ 71.022897][ T4905] usb_disconnect.cold+0x27d/0x780 [ 71.028012][ T4905] hub_event+0x1c8a/0x42d0 [ 71.032423][ T4905] ? hub_port_debounce+0x3b0/0x3b0 [ 71.037531][ T4905] ? lock_release+0x710/0x710 [ 71.042194][ T4905] ? lock_downgrade+0x6d0/0x6d0 [ 71.047061][ T4905] ? do_raw_spin_lock+0x120/0x2b0 [ 71.052073][ T4905] process_one_work+0x98d/0x15f0 [ 71.056993][ T4905] ? pwq_dec_nr_in_flight+0x320/0x320 [ 71.064689][ T4905] ? rwlock_bug.part.0+0x90/0x90 [ 71.069609][ T4905] ? _raw_spin_lock_irq+0x41/0x50 [ 71.074637][ T4905] worker_thread+0x82b/0x1120 [ 71.079307][ T4905] ? __kthread_parkme+0x13f/0x1e0 [ 71.084485][ T4905] ? process_one_work+0x15f0/0x15f0 [ 71.089672][ T4905] kthread+0x3b1/0x4a0 [ 71.093717][ T4905] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 71.099587][ T4905] ret_from_fork+0x1f/0x30 [ 71.103985][ T4905] Modules linked in: [ 71.109311][ T4905] ---[ end trace b101ac6bc2aa3230 ]--- [ 71.114782][ T4905] RIP: 0010:drm_client_buffer_vunmap+0x26