program:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000020c0)=""/245, 0xf5}], 0x1}}], 0x2, 0x42, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x34524742}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
close(0x3)
syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2152, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00238d0000008d24300398e28d2f478a314611e1e637063d79b2240c461cb0e3560156df8ec42a640a8a41473728109aefc30603ffefbd3c61c740996e2a8e2006f31664bb7e11255737491ba61834bdb1480bbb061866d3af5c09156adb8008fd20ab24ba96b4a8b23322a9412facbfb191db59b03954256e712182435139d7aef5d80300000094722528a555d3d8237cd04e"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="200799000000adc5120c0877704eca673bf462895c85ef6f3277db36f717be56e2a0cb7a7ed4d3327ede77155512a0fb3b306e10f2b0e64bac93c0e5b0eba37f89a115152134bb23d236640630d183e6c874751426de68a6fc20ed6a278baf257e3532040089e07c1f3ae8524d2ffbff0869b310b8d1ab8ba2e8f97d5b8b18278c1c39cb8f3a9329b1d37a6d3f99c71299302ad63c56a95d8e9eec70bd53e689eee5cd10d703b1eabf84412a2cf49aa9c1d65fc4542898978deb52307a2aea2b7eb9948aee98960bb232b79756ed8667e2b9c3ce47c65c13d0c390341451666b20747bc9aebd1225744d15ea8c0be59aca508618444dd3b0664f24b657dc6e296b0135d1e6c15c2cd63d3b38b25bdbafa6b0b09e87b4df86e1d67562d32118a1b4f12c8ad349ba95d9e6"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x100}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "a528025de0ddac2ba77a30f999ad2fb6efcd3ce224e3bdd5a7f8c9dddcafa0028b8be5009965758b8a308c24695dfc"}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1004c897}, 0x80)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x30, 0x4, "9574cab3"}, 0x0, 0x0})
[ 94.408932][ T5272] Bluetooth: hci0: command tx timeout
[ 94.811156][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.965423][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[ 94.971900][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 95.005235][ T9] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 002
[ 95.411393][ T9] (null): failure reading functionality
[ 95.430253][ T9] i2c i2c-2: failure reading functionality
[ 95.477820][ T9] i2c i2c-2: connected i2c-tiny-usb device
[ 95.502953][ T9] usb 5-1: USB disconnect, device number 2
[ 95.537398][ T5308] i2c i2c-2: failure writing data
[ 95.558278][ T5308] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5
[ 95.578361][ T5308] ==================================================================
[ 95.581708][ T5308] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40
[ 95.584981][ T5308] Read of size 1 at addr ffff888042649b40 by task syz.0.0/5308
[ 95.588285][ T5308]
[ 95.589359][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.589376][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.589384][ T5308] Call Trace:
[ 95.589392][ T5308]
[ 95.589398][ T5308] dump_stack_lvl+0xe8/0x150
[ 95.589415][ T5308] print_address_description+0x55/0x1e0
[ 95.589432][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 95.589442][ T5308] print_report+0x58/0x70
[ 95.589456][ T5308] kasan_report+0x117/0x150
[ 95.589473][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 95.589485][ T5308] ? lockref_get+0x15/0x60
[ 95.589544][ T5308] __kasan_check_byte+0x2a/0x40
[ 95.589554][ T5308] lock_acquire+0x84/0x350
[ 95.589565][ T5308] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.589574][ T5308] _raw_spin_lock+0x2e/0x40
[ 95.589581][ T5308] ? lockref_get+0x15/0x60
[ 95.589592][ T5308] lockref_get+0x15/0x60
[ 95.589605][ T5308] __simple_recursive_removal+0x33/0x520
[ 95.589620][ T5308] ? mntput+0x65/0xc0
[ 95.589630][ T5308] ? __pfx_remove_one+0x10/0x10
[ 95.589641][ T5308] debugfs_remove+0x5b/0x70
[ 95.589652][ T5308] i2c_device_probe+0x8dc/0xbf0
[ 95.589664][ T5308] ? __pfx_i2c_device_probe+0x10/0x10
[ 95.589676][ T5308] ? sysfs_do_create_link_sd+0xe0/0x110
[ 95.589695][ T5308] ? driver_sysfs_add+0x1fe/0x210
[ 95.589710][ T5308] ? __pfx_i2c_device_probe+0x10/0x10
[ 95.589720][ T5308] really_probe+0x254/0xae0
[ 95.589730][ T5308] __driver_probe_device+0x1e8/0x360
[ 95.589742][ T5308] driver_probe_device+0x4f/0x240
[ 95.589755][ T5308] __device_attach_driver+0x270/0x410
[ 95.589768][ T5308] bus_for_each_drv+0x258/0x2f0
[ 95.589778][ T5308] ? __pfx___device_attach_driver+0x10/0x10
[ 95.589791][ T5308] ? __pfx_bus_for_each_drv+0x10/0x10
[ 95.589800][ T5308] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.589811][ T5308] __device_attach+0x2c4/0x450
[ 95.589825][ T5308] ? __pfx___device_attach+0x10/0x10
[ 95.589838][ T5308] ? do_raw_spin_unlock+0x4d/0x200
[ 95.589851][ T5308] ? _raw_spin_unlock+0x28/0x50
[ 95.589861][ T5308] device_initial_probe+0xa1/0xd0
[ 95.589874][ T5308] bus_probe_device+0x12a/0x220
[ 95.589885][ T5308] device_add+0x7d7/0xb80
[ 95.589897][ T5308] i2c_new_client_device+0xa29/0x1130
[ 95.589913][ T5308] ? __pfx_i2c_new_client_device+0x10/0x10
[ 95.589924][ T5308] ? __mutex_lock+0x30b/0x1550
[ 95.589935][ T5308] ? new_device_store+0x132/0x530
[ 95.589948][ T5308] new_device_store+0x24b/0x530
[ 95.589958][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 95.589972][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 95.589984][ T5308] ? __pfx_new_device_store+0x10/0x10
[ 95.589998][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 95.590010][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 95.590023][ T5308] ? sysfs_file_kobj+0x1e4/0x230
[ 95.590037][ T5308] ? sysfs_kf_write+0x166/0x260
[ 95.590051][ T5308] ? __pfx_sysfs_kf_write+0x10/0x10
[ 95.590064][ T5308] kernfs_fop_write_iter+0x3a4/0x540
[ 95.590076][ T5308] vfs_write+0x612/0xba0
[ 95.590094][ T5308] ? __pfx_vfs_write+0x10/0x10
[ 95.590112][ T5308] ? __fget_files+0x2a/0x420
[ 95.590129][ T5308] ksys_write+0x150/0x270
[ 95.590138][ T5308] ? __pfx_ksys_write+0x10/0x10
[ 95.590154][ T5308] do_syscall_64+0x166/0x520
[ 95.590166][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.590177][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 95.590189][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.590200][ T5308] RIP: 0033:0x7f5d0a19e0d9
[ 95.590220][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.590230][ T5308] RSP: 002b:00007f5d0b02cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 95.590244][ T5308] RAX: ffffffffffffffda RBX: 00007f5d0a425fa0 RCX: 00007f5d0a19e0d9
[ 95.590253][ T5308] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000006
[ 95.590261][ T5308] RBP: 00007f5d0a235024 R08: 0000000000000000 R09: 0000000000000000
[ 95.590268][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.590275][ T5308] R13: 00007f5d0a426038 R14: 00007f5d0a425fa0 R15: 00007ffd88dd4eb8
[ 95.590287][ T5308]
[ 95.590292][ T5308]
[ 95.763165][ T5308] Allocated by task 5308:
[ 95.765053][ T5308] kasan_save_track+0x3e/0x80
[ 95.767006][ T5308] __kasan_slab_alloc+0x6c/0x80
[ 95.769119][ T5308] kmem_cache_alloc_lru_noprof+0x2ae/0x5f0
[ 95.771698][ T5308] __d_alloc+0x37/0x6f0
[ 95.773616][ T5308] d_alloc+0x4b/0x190
[ 95.775409][ T5308] lookup_one_qstr_excl+0xd8/0x360
[ 95.777731][ T5308] start_dirop+0x5c/0x90
[ 95.779557][ T5308] simple_start_creating+0xcc/0x110
[ 95.781737][ T5308] debugfs_start_creating+0xca/0x1b0
[ 95.784009][ T5308] debugfs_create_dir+0x24/0x350
[ 95.786214][ T5308] i2c_device_probe+0x814/0xbf0
[ 95.788373][ T5308] really_probe+0x254/0xae0
[ 95.790417][ T5308] __driver_probe_device+0x1e8/0x360
[ 95.792713][ T5308] driver_probe_device+0x4f/0x240
[ 95.794752][ T5308] __device_attach_driver+0x270/0x410
[ 95.796933][ T5308] bus_for_each_drv+0x258/0x2f0
[ 95.798830][ T5308] __device_attach+0x2c4/0x450
[ 95.800979][ T5308] device_initial_probe+0xa1/0xd0
[ 95.803235][ T5308] bus_probe_device+0x12a/0x220
[ 95.805304][ T5308] device_add+0x7d7/0xb80
[ 95.807087][ T5308] i2c_new_client_device+0xa29/0x1130
[ 95.809254][ T5308] new_device_store+0x24b/0x530
[ 95.811179][ T5308] kernfs_fop_write_iter+0x3a4/0x540
[ 95.813426][ T5308] vfs_write+0x612/0xba0
[ 95.815274][ T5308] ksys_write+0x150/0x270
[ 95.817167][ T5308] do_syscall_64+0x166/0x520
[ 95.819070][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.821456][ T5308]
[ 95.822444][ T5308] Freed by task 9:
[ 95.823972][ T5308] kasan_save_track+0x3e/0x80
[ 95.825839][ T5308] kasan_save_free_info+0x40/0x50
[ 95.827879][ T5308] __kasan_slab_free+0x5c/0x80
[ 95.829911][ T5308] kmem_cache_free+0x182/0x650
[ 95.832002][ T5308] rcu_core+0x794/0x10b0
[ 95.833764][ T5308] handle_softirqs+0x226/0x860
[ 95.835768][ T5308] __irq_exit_rcu+0xcb/0x220
[ 95.837819][ T5308] irq_exit_rcu+0x9/0x30
[ 95.839634][ T5308] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 95.842046][ T5308] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 95.844693][ T5308]
[ 95.845753][ T5308] Last potentially related work creation:
[ 95.848270][ T5308] kasan_save_stack+0x3e/0x60
[ 95.850393][ T5308] kasan_record_aux_stack+0xbd/0xd0
[ 95.852776][ T5308] call_rcu+0xee/0x8b0
[ 95.854410][ T5308] dentry_kill+0x4d3/0x880
[ 95.856313][ T5308] finish_dput+0x1a/0x260
[ 95.858135][ T5308] find_next_child+0x1e7/0x250
[ 95.860109][ T5308] __simple_recursive_removal+0x10b/0x520
[ 95.862371][ T5308] debugfs_remove+0x5b/0x70
[ 95.864227][ T5308] i2c_del_adapter+0x229/0x430
[ 95.866253][ T5308] i2c_tiny_usb_disconnect+0x49/0xd0
[ 95.868556][ T5308] usb_unbind_interface+0x295/0x9f0
[ 95.870857][ T5308] device_release_driver_internal+0x4f5/0x880
[ 95.873500][ T5308] bus_remove_device+0x444/0x560
[ 95.875491][ T5308] device_del+0x524/0x8f0
[ 95.877576][ T5308] usb_disable_device+0x3d4/0x8d0
[ 95.879691][ T5308] usb_disconnect+0x346/0x9a0
[ 95.881746][ T5308] hub_event+0x1bbb/0x4d30
[ 95.883671][ T5308] process_scheduled_works+0xc3d/0x1630
[ 95.886121][ T5308] worker_thread+0xa47/0xfb0
[ 95.888050][ T5308] kthread+0x38b/0x480
[ 95.889820][ T5308] ret_from_fork+0x514/0xb70
[ 95.891789][ T5308] ret_from_fork_asm+0x1a/0x30
[ 95.893681][ T5308]
[ 95.894684][ T5308] The buggy address belongs to the object at ffff888042649a70
[ 95.894684][ T5308] which belongs to the cache dentry of size 312
[ 95.900037][ T5308] The buggy address is located 208 bytes inside of
[ 95.900037][ T5308] freed 312-byte region [ffff888042649a70, ffff888042649ba8)
[ 95.905628][ T5308]
[ 95.906733][ T5308] The buggy address belongs to the physical page:
[ 95.909656][ T5308] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42648
[ 95.913370][ T5308] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 95.916936][ T5308] memcg:ffff888034058e01
[ 95.918763][ T5308] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 95.921998][ T5308] page_type: f5(slab)
[ 95.923726][ T5308] raw: 04fff00000000040 ffff88801c6e78c0 dead000000000100 dead000000000122
[ 95.927128][ T5308] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff888034058e01
[ 95.930363][ T5308] head: 04fff00000000040 ffff88801c6e78c0 dead000000000100 dead000000000122
[ 95.933824][ T5308] head: 0000000000000000 0000000800150015 00000000f5000000 ffff888034058e01
[ 95.937532][ T5308] head: 04fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 95.941242][ T5308] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 95.944550][ T5308] page dumped because: kasan: bad access detected
[ 95.947151][ T5308] page_owner tracks the page as allocated
[ 95.949529][ T5308] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5076, tgid 5076 (init), ts 61528330437
[ 95.958050][ T5308] post_alloc_hook+0x1f9/0x250
[ 95.960122][ T5308] get_page_from_freelist+0x2209/0x2280
[ 95.962435][ T5308] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 95.964819][ T5308] allocate_slab+0x7c/0x5e0
[ 95.966737][ T5308] refill_objects+0x2d5/0x350
[ 95.968688][ T5308] __pcs_replace_empty_main+0x2c3/0x6b0
[ 95.971053][ T5308] kmem_cache_alloc_lru_noprof+0x38d/0x5f0
[ 95.973529][ T5308] __d_alloc+0x37/0x6f0
[ 95.975194][ T5308] d_alloc_parallel+0xde/0x16b0
[ 95.977127][ T5308] lookup_open+0x2c7/0x1a40
[ 95.978899][ T5308] path_openat+0x677/0x1d60
[ 95.980778][ T5308] do_file_open+0x23e/0x4a0
[ 95.982746][ T5308] do_open_execat+0x12b/0x590
[ 95.984865][ T5308] alloc_bprm+0x24/0x640
[ 95.986715][ T5308] do_execveat_common+0x172/0x670
[ 95.988671][ T5308] __x64_sys_execve+0x97/0xc0
[ 95.990439][ T5308] page_owner free stack trace missing
[ 95.992512][ T5308]
[ 95.993483][ T5308] Memory state around the buggy address:
[ 95.995898][ T5308] ffff888042649a00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fa fb
[ 95.999448][ T5308] ffff888042649a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 96.003518][ T5308] >ffff888042649b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 96.007016][ T5308] ^
[ 96.009979][ T5308] ffff888042649b80: fb fb fb fb fb fc fc fc fc fc fc fc fc 00 00 00
[ 96.013459][ T5308] ffff888042649c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 96.017584][ T5308] ==================================================================
[ 96.022604][ T5308] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 96.025859][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 96.029457][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.033272][ T5308] Call Trace:
[ 96.034575][ T5308]
[ 96.035925][ T5308] vpanic+0x56d/0xa60
[ 96.037690][ T5308] ? __pfx_vpanic+0x10/0x10
[ 96.039727][ T5308] panic+0xc5/0xd0
[ 96.041300][ T5308] ? __pfx_panic+0x10/0x10
[ 96.043077][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 96.045147][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 96.047196][ T5308] check_panic_on_warn+0x89/0xb0
[ 96.049403][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 96.051455][ T5308] end_report+0x73/0x170
[ 96.053314][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 96.055364][ T5308] kasan_report+0x128/0x150
[ 96.057434][ T5308] ? _raw_spin_lock+0x2e/0x40
[ 96.059376][ T5308] ? lockref_get+0x15/0x60
[ 96.061083][ T5308] __kasan_check_byte+0x2a/0x40
[ 96.063087][ T5308] lock_acquire+0x84/0x350
[ 96.064990][ T5308] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.067207][ T5308] _raw_spin_lock+0x2e/0x40
[ 96.069077][ T5308] ? lockref_get+0x15/0x60
[ 96.070925][ T5308] lockref_get+0x15/0x60
[ 96.072789][ T5308] __simple_recursive_removal+0x33/0x520
[ 96.075317][ T5308] ? mntput+0x65/0xc0
[ 96.077126][ T5308] ? __pfx_remove_one+0x10/0x10
[ 96.079251][ T5308] debugfs_remove+0x5b/0x70
[ 96.081219][ T5308] i2c_device_probe+0x8dc/0xbf0
[ 96.083239][ T5308] ? __pfx_i2c_device_probe+0x10/0x10
[ 96.085287][ T5308] ? sysfs_do_create_link_sd+0xe0/0x110
[ 96.087430][ T5308] ? driver_sysfs_add+0x1fe/0x210
[ 96.089379][ T5308] ? __pfx_i2c_device_probe+0x10/0x10
[ 96.091314][ T5308] really_probe+0x254/0xae0
[ 96.092882][ T5308] __driver_probe_device+0x1e8/0x360
[ 96.094636][ T5308] driver_probe_device+0x4f/0x240
[ 96.096653][ T5308] __device_attach_driver+0x270/0x410
[ 96.098932][ T5308] bus_for_each_drv+0x258/0x2f0
[ 96.101024][ T5308] ? __pfx___device_attach_driver+0x10/0x10
[ 96.103563][ T5308] ? __pfx_bus_for_each_drv+0x10/0x10
[ 96.105893][ T5308] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 96.108320][ T5308] __device_attach+0x2c4/0x450
[ 96.110141][ T5308] ? __pfx___device_attach+0x10/0x10
[ 96.112253][ T5308] ? do_raw_spin_unlock+0x4d/0x200
[ 96.114178][ T5308] ? _raw_spin_unlock+0x28/0x50
[ 96.116268][ T5308] device_initial_probe+0xa1/0xd0
[ 96.118423][ T5308] bus_probe_device+0x12a/0x220
[ 96.120564][ T5308] device_add+0x7d7/0xb80
[ 96.122430][ T5308] i2c_new_client_device+0xa29/0x1130
[ 96.124800][ T5308] ? __pfx_i2c_new_client_device+0x10/0x10
[ 96.127292][ T5308] ? __mutex_lock+0x30b/0x1550
[ 96.129343][ T5308] ? new_device_store+0x132/0x530
[ 96.131996][ T5308] new_device_store+0x24b/0x530
[ 96.134379][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 96.136553][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 96.138659][ T5308] ? __pfx_new_device_store+0x10/0x10
[ 96.140994][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 96.143089][ T5308] ? sysfs_file_kobj+0x1a/0x230
[ 96.145176][ T5308] ? sysfs_file_kobj+0x1e4/0x230
[ 96.147228][ T5308] ? sysfs_kf_write+0x166/0x260
[ 96.149342][ T5308] ? __pfx_sysfs_kf_write+0x10/0x10
[ 96.151429][ T5308] kernfs_fop_write_iter+0x3a4/0x540
[ 96.153465][ T5308] vfs_write+0x612/0xba0
[ 96.155186][ T5308] ? __pfx_vfs_write+0x10/0x10
[ 96.157074][ T5308] ? __fget_files+0x2a/0x420
[ 96.158903][ T5308] ksys_write+0x150/0x270
[ 96.160483][ T5308] ? __pfx_ksys_write+0x10/0x10
[ 96.162033][ T5308] do_syscall_64+0x166/0x520
[ 96.163647][ T5308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.165762][ T5308] ? clear_bhb_loop+0x70/0xc0
[ 96.167395][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.169785][ T5308] RIP: 0033:0x7f5d0a19e0d9
[ 96.171664][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.178750][ T5308] RSP: 002b:00007f5d0b02cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 96.182333][ T5308] RAX: ffffffffffffffda RBX: 00007f5d0a425fa0 RCX: 00007f5d0a19e0d9
[ 96.185698][ T5308] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000006
[ 96.189097][ T5308] RBP: 00007f5d0a235024 R08: 0000000000000000 R09: 0000000000000000
[ 96.192489][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 96.195706][ T5308] R13: 00007f5d0a426038 R14: 00007f5d0a425fa0 R15: 00007ffd88dd4eb8
[ 96.198964][ T5308]
[ 96.200632][ T5308] Kernel Offset: disabled
[ 96.202350][ T5308] Rebooting in 86400 seconds..