[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.193' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 30.992521][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.352359][ T17] usb 1-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 31.361517][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.372852][ T17] usb 1-1: config 0 descriptor?? executing program [ 31.682315][ T17] udlfb 1-1:0.0: vendor descriptor not available (-71) [ 31.702058][ T17] usb 1-1: Read EDID byte 0 failed: -71 [ 31.722034][ T17] usb 1-1: Read EDID byte 0 failed: -71 [ 31.742052][ T17] usb 1-1: Read EDID byte 0 failed: -71 [ 31.747664][ T17] usb 1-1: Unable to get valid EDID from device/display [ 31.774344][ T17] usb 1-1: submit urb error: -2 [ 31.780746][ T17] udlfb: probe of 1-1:0.0 failed with error -2 [ 31.841969][ T17] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 31.850483][ T17] [drm:udl_init.cold] *ERROR* Unrecognized vendor firmware descriptor [ 31.871935][ T17] [drm:udl_init] *ERROR* Selecting channel failed [ 31.884755][ T17] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 0 [ 31.892342][ T17] [drm] Initialized udl on minor 0 [ 31.912030][ T17] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 31.924559][ T17] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 31.938721][ T17] usb 1-1: USB disconnect, device number 2 [ 31.947641][ T17] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN [ 31.958700][ T17] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 31.967110][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.11.0-rc1-syzkaller #0 [ 31.975341][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.985810][ T17] Workqueue: usb_hub_wq hub_event [ 31.990826][ T17] RIP: 0010:drm_client_buffer_vunmap+0x26/0x50 [ 31.996961][ T17] Code: 00 00 00 00 53 48 89 fb 48 83 ec 08 e8 b3 79 ea fe 48 8d 7b 10 48 b8 00 00 00 00 00 fc ff df 48 8d 73 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 0e 48 8b 7b 10 48 83 c4 08 5b e9 e6 70 f7 ff 48 89 [ 32.016545][ T17] RSP: 0018:ffffc9000012f710 EFLAGS: 00010202 [ 32.022624][ T17] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 32.030573][ T17] RDX: 0000000000000002 RSI: 0000000000000018 RDI: 0000000000000010 [ 32.038534][ T17] RBP: ffff8881099a98c8 R08: 0000000000000000 R09: ffff8881099a9a17 [ 32.046484][ T17] R10: ffffed1021335342 R11: 0000000000000000 R12: 0000000000000000 [ 32.054432][ T17] R13: ffff8881099a98d8 R14: ffff8881099a9810 R15: dead000000000100 [ 32.062381][ T17] FS: 0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000 [ 32.071289][ T17] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.077850][ T17] CR2: 00007effa0f83710 CR3: 0000000102069000 CR4: 00000000001506e0 [ 32.085799][ T17] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.093766][ T17] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.101717][ T17] Call Trace: [ 32.104975][ T17] drm_fbdev_cleanup+0x380/0x440 [ 32.109892][ T17] ? drm_fbdev_cleanup+0x440/0x440 [ 32.114977][ T17] drm_fbdev_client_unregister+0x61/0x80 [ 32.120587][ T17] drm_client_dev_unregister+0x239/0x3b0 [ 32.126215][ T17] drm_dev_unregister+0xe9/0x2b0 [ 32.131131][ T17] usb_unbind_interface+0x1d8/0x8d0 [ 32.136308][ T17] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 32.142004][ T17] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 32.147528][ T17] ? usb_unbind_device+0x1a0/0x1a0 [ 32.152616][ T17] __device_release_driver+0x3bd/0x6f0 [ 32.158062][ T17] device_release_driver+0x26/0x40 [ 32.163164][ T17] bus_remove_device+0x2eb/0x5a0 [ 32.168082][ T17] device_del+0x502/0xd40 [ 32.172387][ T17] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 32.178689][ T17] ? pm_runtime_barrier+0xdc/0x1a0 [ 32.183785][ T17] usb_disable_device+0x35b/0x7b0 [ 32.188809][ T17] ? trace_hardirqs_on+0x50/0x1a0 [ 32.193818][ T17] usb_disconnect.cold+0x27d/0x780 [ 32.198918][ T17] hub_event+0x1c8a/0x42d0 [ 32.203316][ T17] ? hub_port_debounce+0x3b0/0x3b0 [ 32.208407][ T17] ? zap_class+0x51/0x9a0 [ 32.212716][ T17] ? __queue_work+0x5a1/0xeb0 [ 32.217373][ T17] ? lock_release+0x6d0/0x6d0 [ 32.222026][ T17] ? lock_downgrade+0x6d0/0x6d0 [ 32.226855][ T17] ? do_raw_spin_lock+0x120/0x2b0 [ 32.231857][ T17] process_one_work+0x98d/0x1580 [ 32.236776][ T17] ? pwq_dec_nr_in_flight+0x320/0x320 [ 32.242130][ T17] ? rwlock_bug.part.0+0x90/0x90 [ 32.247046][ T17] worker_thread+0x82b/0x1120 [ 32.251720][ T17] ? process_one_work+0x1580/0x1580 [ 32.256897][ T17] kthread+0x38c/0x460 [ 32.260942][ T17] ? _raw_spin_unlock_irq+0x1f/0x30 [ 32.266133][ T17] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 32.272005][ T17] ret_from_fork+0x1f/0x30 [ 32.276405][ T17] Modules linked in: [ 32.280473][ T17] ---[ end trace 4265e655aa19af25 ]--- [ 32.285949][ T17] RIP: 0010:drm_client_buffer_vunmap+0x26/0x50 [ 32.292145][ T17] Code: 00 00 00 00 53 48 89 fb 48 83 ec 08 e8 b3 79 ea fe 48 8d 7b 10 48 b8 00 00 00 00 00 fc ff df 48 8d 73 18 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 0e 48 8b 7b 10 48 83 c4 08 5b e9 e6 70 f7 ff 48 89 [ 32.311808][ T17] RSP: 0018:ffffc9000012f710 EFLAGS: 00010202 [ 32.317869][ T17] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 32.325842][ T17] RDX: 0000000000000002 RSI: 0000000000000018 RDI: 0000000000000010 [ 32.333852][ T17] RBP: ffff8881099a98c8 R08: 0000000000000000 R09: ffff8881099a9a17 [ 32.341835][ T17] R10: ffffed1021335342 R11: 0000000000000000 R12: 0000000000000000 [ 32.349800][ T17] R13: ffff8881099a98d8 R14: ffff8881099a9810 R15: dead000000000100 [ 32.357788][ T17] FS: 0000000000000000(0000) GS:ffff8881f6b00000(0000) knlGS:0000000000000000 [ 32.366749][ T17] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.373346][ T17] CR2: 00007effa0f83710 CR3: 0000000102069000 CR4: 00000000001506e0 [ 32.381353][ T17] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.389331][ T17] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.397326][ T17] Kernel panic - not syncing: Fatal exception [ 32.404192][ T17] Kernel Offset: disabled [ 32.408500][ T17] Rebooting in 86400 seconds..