viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 usb 5-1: USB disconnect, device number 7 general protection fault, probably for non-canonical address 0xdffffc00000000b3: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f] CPU: 0 PID: 10396 Comm: kworker/0:10 Not tainted 5.12.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event RIP: 0010:__list_del_entry_valid+0x1f/0x100 lib/list_debug.c:42 Code: fd 0f 0b 0f 1f 84 00 00 00 00 00 41 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 a5 01 ec fd 4d 8b 7e 08 4c 89 f0 48 c1 e8 RSP: 0018:ffffc900173e7240 EFLAGS: 00010202 RAX: 00000000000000b3 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc90016759000 RSI: 0000000000009ad1 RDI: 0000000000000598 RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1f27ab6 R10: fffffbfff1f27ab6 R11: 0000000000000000 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000590 R15: 1ffff1100505ac01 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffee496bc47 CR3: 0000000025f69000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:132 [inline] list_del include/linux/list.h:146 [inline] gpiodevice_release+0x48/0x1b0 drivers/gpio/gpiolib.c:479 device_release+0x98/0x1c0 drivers/base/core.c:2104 kobject_cleanup+0x1c9/0x280 lib/kobject.c:705 release_nodes+0x867/0x940 drivers/base/devres.c:523 __device_release_driver drivers/base/dd.c:1160 [inline] device_release_driver_internal+0x535/0x7b0 drivers/base/dd.c:1187 bus_remove_device+0x300/0x420 drivers/base/bus.c:533 device_del+0x5e1/0xa90 drivers/base/core.c:3421 platform_device_del drivers/base/platform.c:783 [inline] platform_device_unregister+0x42/0x280 drivers/base/platform.c:821 mfd_remove_devices_fn+0x11a/0x180 drivers/mfd/mfd-core.c:375 device_for_each_child_reverse+0xbb/0x120 drivers/base/core.c:3584 mfd_remove_devices+0x51/0x90 drivers/mfd/mfd-core.c:391 vprbrd_disconnect+0x4b/0xc0 drivers/mfd/viperboard.c:111 usb_unbind_interface+0x1f2/0x860 drivers/usb/core/driver.c:458 __device_release_driver drivers/base/dd.c:1156 [inline] device_release_driver_internal+0x51e/0x7b0 drivers/base/dd.c:1187 bus_remove_device+0x300/0x420 drivers/base/bus.c:533 device_del+0x5e1/0xa90 drivers/base/core.c:3421 usb_disable_device+0x407/0x800 drivers/usb/core/message.c:1413 usb_disconnect+0x33a/0x8a0 drivers/usb/core/hub.c:2218 hub_port_connect+0x214/0x25b0 drivers/usb/core/hub.c:5074 hub_port_connect_change+0x5c6/0xab0 drivers/usb/core/hub.c:5363 port_event+0xa6f/0x10b0 drivers/usb/core/hub.c:5509 hub_event+0x417/0xcb0 drivers/usb/core/hub.c:5591 process_one_work+0x789/0xfd0 kernel/workqueue.c:2275 process_scheduled_works kernel/workqueue.c:2337 [inline] worker_thread+0xe28/0x1300 kernel/workqueue.c:2423 kthread+0x39a/0x3c0 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294 Modules linked in: ---[ end trace 539d94888cc39244 ]--- RIP: 0010:__list_del_entry_valid+0x1f/0x100 lib/list_debug.c:42 Code: fd 0f 0b 0f 1f 84 00 00 00 00 00 41 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 a5 01 ec fd 4d 8b 7e 08 4c 89 f0 48 c1 e8 RSP: 0018:ffffc900173e7240 EFLAGS: 00010202 RAX: 00000000000000b3 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc90016759000 RSI: 0000000000009ad1 RDI: 0000000000000598 RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1f27ab6 R10: fffffbfff1f27ab6 R11: 0000000000000000 R12: dffffc0000000000 R13: dffffc0000000000 R14: 0000000000000590 R15: 1ffff1100505ac01 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd940df1000 CR3: 0000000025f69000 CR4: 00000000001506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400