syzbot

BUG: unable to handle page fault for address: ffff8801d386d964
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#1] SMP KASAN
CPU: 0 PID: 102 Comm: kworker/0:2 Not tainted 5.4.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:kobject_put+0x4b/0x2e0 lib/kobject.c:735
Code: 8d 65 3c 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 0f b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 34 02 00 00 <0f> b6 5d 3c 31 ff 83 e3 01 89 de e8 f5 50 cc fb 84 db 74 6c e8 bc
RSP: 0000:ffff8881d510f500 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8801d386d928 RCX: ffffc90010f17000
RDX: 0000000000000004 RSI: ffffffff85722e00 RDI: ffff8801d386d928
RBP: ffff8801d386d928 R08: ffff8881d77f4980 R09: fffffbfff0dfd419
R10: fffffbfff0dfd418 R11: ffffffff86fea0c7 R12: ffff8801d386d964
R13: ffff8881ca472000 R14: dffffc0000000000 R15: ffff8881ca472460
FS:  0000000000000000(0000) GS:ffff8881db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8801d386d964 CR3: 00000001c8403000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 put_device drivers/base/core.c:2586 [inline]
 device_del+0x91a/0xd30 drivers/base/core.c:2678
 input_unregister_device+0xb4/0xf0 drivers/input/input.c:2268
 hidinput_disconnect+0x15e/0x3d0 drivers/hid/hid-input.c:1960
 hid_disconnect+0x13f/0x1a0 drivers/hid/hid-core.c:2000
 hid_hw_stop+0x12/0x70 drivers/hid/hid-core.c:2047
 ms_remove+0x12/0x90 drivers/hid/hid-microsoft.c:412
 hid_device_remove+0xed/0x240 drivers/hid/hid-core.c:2288
 __device_release_driver drivers/base/dd.c:1132 [inline]
 device_release_driver_internal+0x231/0x500 drivers/base/dd.c:1165
 bus_remove_device+0x2dc/0x4a0 drivers/base/bus.c:532
 device_del+0x481/0xd30 drivers/base/core.c:2664
 hid_remove_device drivers/hid/hid-core.c:2459 [inline]
 hid_destroy_device+0xe1/0x150 drivers/hid/hid-core.c:2478
 usbhid_disconnect+0x9f/0xe0 drivers/hid/usbhid/hid-core.c:1413
 usb_unbind_interface+0x1bd/0x8a0 drivers/usb/core/driver.c:423
 __device_release_driver drivers/base/dd.c:1134 [inline]
 device_release_driver_internal+0x42f/0x500 drivers/base/dd.c:1165
 bus_remove_device+0x2dc/0x4a0 drivers/base/bus.c:532
 device_del+0x481/0xd30 drivers/base/core.c:2664
 usb_disable_device+0x211/0x690 drivers/usb/core/message.c:1237
 usb_disconnect+0x284/0x8d0 drivers/usb/core/hub.c:2200
 hub_port_connect drivers/usb/core/hub.c:5035 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5324 [inline]
 port_event drivers/usb/core/hub.c:5470 [inline]
 hub_event+0x1753/0x3860 drivers/usb/core/hub.c:5552
 process_one_work+0x92b/0x1530 kernel/workqueue.c:2264
 worker_thread+0x96/0xe20 kernel/workqueue.c:2410
 kthread+0x318/0x420 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
CR2: ffff8801d386d964
---[ end trace 70c9bb4758a12760 ]---
RIP: 0010:kobject_put+0x4b/0x2e0 lib/kobject.c:735
Code: 8d 65 3c 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 0f b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 34 02 00 00 <0f> b6 5d 3c 31 ff 83 e3 01 89 de e8 f5 50 cc fb 84 db 74 6c e8 bc
RSP: 0000:ffff8881d510f500 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff8801d386d928 RCX: ffffc90010f17000
RDX: 0000000000000004 RSI: ffffffff85722e00 RDI: ffff8801d386d928
RBP: ffff8801d386d928 R08: ffff8881d77f4980 R09: fffffbfff0dfd419
R10: fffffbfff0dfd418 R11: ffffffff86fea0c7 R12: ffff8801d386d964
R13: ffff8881ca472000 R14: dffffc0000000000 R15: ffff8881ca472460
FS:  0000000000000000(0000) GS:ffff8881db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffff8801d386d964 CR3: 00000001c8403000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400