usb 2-1: USB disconnect, device number 2 asix 2-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet ================================================================== BUG: KASAN: null-ptr-deref in phy_is_started include/linux/phy.h:947 [inline] BUG: KASAN: null-ptr-deref in phy_disconnect+0x22/0xac drivers/net/phy/phy_device.c:1097 Read of size 4 at addr 0000000000000570 by task kworker/1:0/3192 CPU: 1 PID: 3192 Comm: kworker/1:0 Not tainted 5.14.0-rc1-syzkaller-00003-g417166ddec02 #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: usb_hub_wq hub_event Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:112 ================================================================== Unable to handle kernel NULL pointer dereference at virtual address 0000000000000570 Oops [#1] Modules linked in: CPU: 1 PID: 3192 Comm: kworker/1:0 Tainted: G B 5.14.0-rc1-syzkaller-00003-g417166ddec02 #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: usb_hub_wq hub_event epc : phy_is_started include/linux/phy.h:947 [inline] epc : phy_disconnect+0x22/0xac drivers/net/phy/phy_device.c:1097 ra : phy_is_started include/linux/phy.h:947 [inline] ra : phy_disconnect+0x22/0xac drivers/net/phy/phy_device.c:1097 epc : ffffffff8134049c ra : ffffffff8134049c sp : ffffffe0260577c0 gp : ffffffff83f95bc8 tp : ffffffe00de64740 t0 : ffffffe02604fdd0 t1 : ffffffc40126a6ca t2 : 0000000000000003 s0 : ffffffe0260577e0 s1 : 0000000000000000 a0 : 0000000000000001 a1 : 0000000000000007 a2 : 1ffffffc01bcc8e8 a3 : ffffffff82b9a30a a4 : 0000000000000000 a5 : ffffffe00de65740 a6 : 0000000000f00000 a7 : ffffffe009353653 s2 : ffffffe029410ba0 s3 : ffffffe0080e4600 s4 : ffffffff831f4678 s5 : ffffffe029410d08 s6 : ffffffe029410b90 s7 : ffffffe00c8f8cc0 s8 : ffffffe029410000 s9 : ffffffff8374ffb0 s10: ffffffe00f863030 s11: 0000000000000000 t3 : 00000000000005f2 t4 : ffffffc40126a6ca t5 : ffffffc40126a6cb t6 : 0000000000040000 status: 0000000000000120 badaddr: 0000000000000570 cause: 000000000000000d [] phy_is_started include/linux/phy.h:947 [inline] [] phy_disconnect+0x22/0xac drivers/net/phy/phy_device.c:1097 [] ax88772_unbind+0x42/0x60 drivers/net/usb/asix_devices.c:815 [] usbnet_disconnect+0xa8/0x1fc drivers/net/usb/usbnet.c:1618 [] usb_unbind_interface+0x13c/0x526 drivers/usb/core/driver.c:458 [] __device_release_driver+0x29c/0x3e0 drivers/base/dd.c:1201 [] device_release_driver_internal drivers/base/dd.c:1232 [inline] [] device_release_driver+0x2e/0x44 drivers/base/dd.c:1255 [] bus_remove_device+0x1d4/0x2dc drivers/base/bus.c:529 [] device_del+0x2da/0x6ec drivers/base/core.c:3540 [] usb_disable_device+0x216/0x436 drivers/usb/core/message.c:1419 [] usb_disconnect+0x20e/0x4e2 drivers/input/misc/yealink.c:335 [] hub_port_connect drivers/usb/core/hub.c:5151 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5440 [inline] [] port_event drivers/usb/core/hub.c:5586 [inline] [] hub_event+0x2172/0x3068 drivers/usb/core/hub.c:5668 [] process_one_work+0x5e0/0xf82 kernel/workqueue.c:2276 [] process_scheduled_works kernel/workqueue.c:2338 [inline] [] worker_thread+0x4f8/0x8e6 kernel/workqueue.c:2424 [] kthread+0x25c/0x2c6 kernel/kthread.c:319 [] ret_from_exception+0x0/0x14 ---[ end trace c9cd036d7e6d9d94 ]---