general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077]
CPU: 0 PID: 7367 Comm: syz-executor.1 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:85 [inline]
RIP: 0010:do_raw_spin_lock+0x7b/0x360 kernel/locking/spinlock_debug.c:114
Code: 48 8d 74 24 40 48 c1 ee 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 f1 48 89 74 24 38 48 89 04 16 48 8d 5f 04 48 89 d8 48 c1 e8 03 <8a> 04 10 84 c0 0f 85 ed 01 00 00 8b 03 3d ad 4e ad de 0f 85 5a 01
RSP: 0018:ffffc900043bfc40 EFLAGS: 00010003
RAX: 000000000000000e RBX: 0000000000000074 RCX: 1ffff92000877f90
RDX: dffffc0000000000 RSI: 1ffff92000877f90 RDI: 0000000000000070
RBP: ffffc900043bfd10 R08: dffffc0000000000 R09: fffffbfff1c4dc86
R10: fffffbfff1c4dc86 R11: 1ffffffff1c4dc85 R12: 0000000000000070
R13: 1ffff92000877fa4 R14: 0000000000000070 R15: dffffc0000000000
FS:  0000555555cde400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e522000 CR3: 0000000089f45000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline]
 _raw_spin_lock_irqsave+0xdd/0x120 kernel/locking/spinlock.c:162
 hidraw_release+0xc1/0x5d0 drivers/hid/hidraw.c:352
 __fput+0x3ba/0x880 fs/file_table.c:320
 task_work_run+0x146/0x1c0 kernel/task_work.c:177
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0x134/0x160 kernel/entry/common.c:169
 exit_to_user_mode_prepare+0xad/0x110 kernel/entry/common.c:201
 __syscall_exit_to_user_mode_work kernel/entry/common.c:283 [inline]
 syscall_exit_to_user_mode+0x2e/0x60 kernel/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f51d563d37b
Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44
RSP: 002b:00007fffb8c5cb10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f51d563d37b
RDX: 0000000000000000 RSI: 0000001b2e521dd0 RDI: 0000000000000004
RBP: 00007f51d57ad980 R08: 0000000000000000 R09: 000000009c747208
R10: 0000000000000000 R11: 0000000000000293 R12: 00000000003668f2
R13: 00007fffb8c5cc10 R14: 00007f51d57ac050 R15: 0000000000000032
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:85 [inline]
RIP: 0010:do_raw_spin_lock+0x7b/0x360 kernel/locking/spinlock_debug.c:114
Code: 48 8d 74 24 40 48 c1 ee 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 f1 48 89 74 24 38 48 89 04 16 48 8d 5f 04 48 89 d8 48 c1 e8 03 <8a> 04 10 84 c0 0f 85 ed 01 00 00 8b 03 3d ad 4e ad de 0f 85 5a 01
RSP: 0018:ffffc900043bfc40 EFLAGS: 00010003
RAX: 000000000000000e RBX: 0000000000000074 RCX: 1ffff92000877f90
RDX: dffffc0000000000 RSI: 1ffff92000877f90 RDI: 0000000000000070
RBP: ffffc900043bfd10 R08: dffffc0000000000 R09: fffffbfff1c4dc86
R10: fffffbfff1c4dc86 R11: 1ffffffff1c4dc85 R12: 0000000000000070
R13: 1ffff92000877fa4 R14: 0000000000000070 R15: dffffc0000000000
FS:  0000555555cde400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2e522000 CR3: 0000000089f45000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	48 8d 74 24 40       	lea    0x40(%rsp),%rsi
   5:	48 c1 ee 03          	shr    $0x3,%rsi
   9:	48 b8 f1 f1 f1 f1 04 	movabs $0xf3f3f304f1f1f1f1,%rax
  10:	f3 f3 f3
  13:	48 89 f1             	mov    %rsi,%rcx
  16:	48 89 74 24 38       	mov    %rsi,0x38(%rsp)
  1b:	48 89 04 16          	mov    %rax,(%rsi,%rdx,1)
  1f:	48 8d 5f 04          	lea    0x4(%rdi),%rbx
  23:	48 89 d8             	mov    %rbx,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	8a 04 10             	mov    (%rax,%rdx,1),%al <-- trapping instruction
  2d:	84 c0                	test   %al,%al
  2f:	0f 85 ed 01 00 00    	jne    0x222
  35:	8b 03                	mov    (%rbx),%eax
  37:	3d ad 4e ad de       	cmp    $0xdead4ead,%eax
  3c:	0f                   	.byte 0xf
  3d:	85 5a 01             	test   %ebx,0x1(%rdx)