program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb1600 0x28\x00', 0xf) [ 75.697597][ T5280] Bluetooth: hci0: command tx timeout [ 75.811612][ T5317] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 75.816634][ T5317] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 75.820262][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.824015][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.828255][ T5317] RIP: 0010:regmap_get_i2c_bus+0xbe/0xb00 [ 75.830798][ T5317] Code: 31 ff e8 f5 17 95 fb 83 e5 01 0f 85 23 01 00 00 4c 8b 7c 24 10 4d 8d 6f 1c 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 74 08 00 00 41 8b 6d 00 bf 08 00 00 00 [ 75.838876][ T5317] RSP: 0000:ffffc9000e3973d8 EFLAGS: 00010207 [ 75.841511][ T5317] RAX: dffffc0000000000 RBX: 1ffff11006da9c03 RCX: 0000000000000002 [ 75.844957][ T5317] RDX: ffff88803a3d4a80 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.848352][ T5317] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 75.851688][ T5317] R10: dffffc0000000000 R11: ffffffff87f79f00 R12: 0000000000000003 [ 75.855061][ T5317] R13: 000000000000001c R14: ffff888036d4e018 R15: 0000000000000000 [ 75.858406][ T5317] FS: 00007fc5076ed6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 75.862234][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.865019][ T5317] CR2: 00007f22815ab68c CR3: 000000001f9f4000 CR4: 0000000000352ef0 [ 75.868429][ T5317] Call Trace: [ 75.869910][ T5317] [ 75.871259][ T5317] __devm_regmap_init_i2c+0x29/0x80 [ 75.873462][ T5317] stusb160x_probe+0xfd/0x1940 [ 75.875586][ T5317] ? reacquire_held_locks+0x104/0x190 [ 75.877914][ T5317] ? fast_dput+0x29c/0x670 [ 75.879463][ T5317] ? __pfx_stusb160x_probe+0x10/0x10 [ 75.881236][ T5317] ? do_raw_spin_unlock+0x4d/0x210 [ 75.882995][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 75.884630][ T5317] ? fast_dput+0x469/0x670 [ 75.886136][ T5317] ? dput+0x39/0x60 [ 75.887418][ T5317] ? debugfs_create_dir+0x2a3/0x350 [ 75.889084][ T5317] i2c_device_probe+0x87c/0xbf0 [ 75.890768][ T5317] ? __pfx_i2c_device_probe+0x10/0x10 [ 75.892535][ T5317] ? sysfs_do_create_link_sd+0xe0/0x110 [ 75.894341][ T5317] ? driver_sysfs_add+0x1fe/0x210 [ 75.895980][ T5317] ? __pfx_i2c_device_probe+0x10/0x10 [ 75.897749][ T5317] really_probe+0x254/0xae0 [ 75.899249][ T5317] __driver_probe_device+0x1e8/0x360 [ 75.901012][ T5317] driver_probe_device+0x4f/0x240 [ 75.902684][ T5317] __device_attach_driver+0x270/0x410 [ 75.904516][ T5317] bus_for_each_drv+0x258/0x2f0 [ 75.906406][ T5317] ? __pfx___device_attach_driver+0x10/0x10 [ 75.908616][ T5317] ? __pfx_bus_for_each_drv+0x10/0x10 [ 75.910592][ T5317] ? lockdep_hardirqs_on+0x7a/0x110 [ 75.912394][ T5317] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 75.914325][ T5317] __device_attach+0x2c4/0x450 [ 75.915837][ T5317] ? __pfx___device_attach+0x10/0x10 [ 75.917691][ T5317] ? do_raw_spin_unlock+0x4d/0x210 [ 75.919605][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 75.921411][ T5317] device_initial_probe+0xa1/0xd0 [ 75.923280][ T5317] bus_probe_device+0x12a/0x220 [ 75.925051][ T5317] device_add+0x7d7/0xb80 [ 75.926656][ T5317] i2c_new_client_device+0xa29/0x1130 [ 75.928550][ T5317] ? __pfx_i2c_new_client_device+0x10/0x10 [ 75.930599][ T5317] ? new_device_store+0x132/0x530 [ 75.932341][ T5317] new_device_store+0x24b/0x530 [ 75.934228][ T5317] ? irqentry_exit+0x218/0x8f0 [ 75.936135][ T5317] ? lockdep_hardirqs_on+0x7a/0x110 [ 75.938058][ T5317] ? __pfx_new_device_store+0x10/0x10 [ 75.940000][ T5317] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.941948][ T5317] ? __pfx_new_device_store+0x10/0x10 [ 75.943947][ T5317] ? dev_attr_store+0x4f/0x90 [ 75.945767][ T5317] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.947727][ T5317] kernfs_fop_write_iter+0x3a4/0x540 [ 75.949764][ T5317] vfs_write+0x612/0xba0 [ 75.951582][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 75.953585][ T5317] ? __fget_files+0x2a/0x420 [ 75.955553][ T5317] ksys_write+0x150/0x270 [ 75.957412][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 75.959494][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.962067][ T5317] do_syscall_64+0x174/0x580 [ 75.964090][ T5317] ? trace_irq_disable+0x3b/0x140 [ 75.966203][ T5317] ? clear_bhb_loop+0x40/0x90 [ 75.968201][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.970754][ T5317] RIP: 0033:0x7fc50679e019 [ 75.972669][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.980854][ T5317] RSP: 002b:00007fc5076ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.984266][ T5317] RAX: ffffffffffffffda RBX: 00007fc506a25fa0 RCX: 00007fc50679e019 [ 75.987260][ T5317] RDX: 000000000000000f RSI: 0000200000000300 RDI: 0000000000000003 [ 75.990557][ T5317] RBP: 00007fc50683500c R08: 0000000000000000 R09: 0000000000000000 [ 75.993544][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.996880][ T5317] R13: 00007fc506a26038 R14: 00007fc506a25fa0 R15: 00007ffffdab0bd8 [ 76.000255][ T5317] [ 76.001560][ T5317] Modules linked in: [ 76.004217][ T5317] ---[ end trace 0000000000000000 ]--- [ 76.045365][ T5317] RIP: 0010:regmap_get_i2c_bus+0xbe/0xb00 [ 76.047649][ T5317] Code: 31 ff e8 f5 17 95 fb 83 e5 01 0f 85 23 01 00 00 4c 8b 7c 24 10 4d 8d 6f 1c 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 74 08 00 00 41 8b 6d 00 bf 08 00 00 00 [ 76.054893][ T5317] RSP: 0000:ffffc9000e3973d8 EFLAGS: 00010207 [ 76.057254][ T5317] RAX: dffffc0000000000 RBX: 1ffff11006da9c03 RCX: 0000000000000002 [ 76.060743][ T5317] RDX: ffff88803a3d4a80 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.064435][ T5317] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 76.067850][ T5317] R10: dffffc0000000000 R11: ffffffff87f79f00 R12: 0000000000000003 [ 76.071370][ T5317] R13: 000000000000001c R14: ffff888036d4e018 R15: 0000000000000000 [ 76.075300][ T5317] FS: 00007fc5076ed6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 76.079180][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.081963][ T5317] CR2: 00007fc5069f36b8 CR3: 000000001f9f4000 CR4: 0000000000352ef0 [ 76.085721][ T5317] Kernel panic - not syncing: Fatal exception [ 76.088382][ T5317] Kernel Offset: disabled [ 76.090000][ T5317] Rebooting in 86400 seconds..