viperboard 6-1:0.143: version 0.00 found at bus 006 address 007
viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
usb 6-1: USB disconnect, device number 7
general protection fault, probably for non-canonical address 0xdffffc00000000b3: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f]
CPU: 1 PID: 11763 Comm: kworker/1:11 Not tainted 5.11.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
RIP: 0010:__list_del_entry_valid+0x1f/0x100 lib/list_debug.c:42
Code: fd 0f 0b 0f 1f 84 00 00 00 00 00 41 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 c5 7c ec fd 4d 8b 7e 08 4c 89 f0 48 c1 e8
RSP: 0018:ffffc9000725f240 EFLAGS: 00010202
RAX: 00000000000000b3 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc90015f99000 RSI: 000000000000d1f5 RDI: 0000000000000598
RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1f28ab6
R10: fffffbfff1f28ab6 R11: 0000000000000000 R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000590 R15: 1ffff110058ca001
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe789da690 CR3: 0000000064d2e000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 __list_del_entry include/linux/list.h:132 [inline]
 list_del include/linux/list.h:146 [inline]
 gpiodevice_release+0x48/0x1b0 drivers/gpio/gpiolib.c:479
 device_release+0x98/0x1c0 drivers/base/core.c:2104
 kobject_cleanup+0x1c9/0x280 lib/kobject.c:705
 release_nodes+0x867/0x940 drivers/base/devres.c:523
 __device_release_driver drivers/base/dd.c:1160 [inline]
 device_release_driver_internal+0x535/0x7b0 drivers/base/dd.c:1187
 bus_remove_device+0x300/0x420 drivers/base/bus.c:533
 device_del+0x5e1/0xa90 drivers/base/core.c:3421
 platform_device_del drivers/base/platform.c:783 [inline]
 platform_device_unregister+0x42/0x280 drivers/base/platform.c:821
 mfd_remove_devices_fn+0x11a/0x180 drivers/mfd/mfd-core.c:375
 device_for_each_child_reverse+0xbb/0x120 drivers/base/core.c:3584
 mfd_remove_devices+0x51/0x90 drivers/mfd/mfd-core.c:391
 vprbrd_disconnect+0x4b/0xc0 drivers/mfd/viperboard.c:111
 usb_unbind_interface+0x1f2/0x860 drivers/usb/core/driver.c:458
 __device_release_driver drivers/base/dd.c:1156 [inline]
 device_release_driver_internal+0x51e/0x7b0 drivers/base/dd.c:1187
 bus_remove_device+0x300/0x420 drivers/base/bus.c:533
 device_del+0x5e1/0xa90 drivers/base/core.c:3421
 usb_disable_device+0x407/0x800 drivers/usb/core/message.c:1413
 usb_disconnect+0x33a/0x8a0 drivers/usb/core/hub.c:2218
 hub_port_connect+0x214/0x25b0 drivers/usb/core/hub.c:5074
 hub_port_connect_change+0x5c6/0xab0 drivers/usb/core/hub.c:5363
 port_event+0xa6f/0x10b0 drivers/usb/core/hub.c:5509
 hub_event+0x417/0xcb0 drivers/usb/core/hub.c:5591
 process_one_work+0x789/0xfd0 kernel/workqueue.c:2275
 process_scheduled_works kernel/workqueue.c:2337 [inline]
 worker_thread+0xe28/0x1300 kernel/workqueue.c:2423
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294
Modules linked in:
---[ end trace 2aaff69d41da7fe4 ]---
RIP: 0010:__list_del_entry_valid+0x1f/0x100 lib/list_debug.c:42
Code: fd 0f 0b 0f 1f 84 00 00 00 00 00 41 57 41 56 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 c5 7c ec fd 4d 8b 7e 08 4c 89 f0 48 c1 e8
RSP: 0018:ffffc9000725f240 EFLAGS: 00010202
RAX: 00000000000000b3 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffffc90015f99000 RSI: 000000000000d1f5 RDI: 0000000000000598
RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1f28ab6
R10: fffffbfff1f28ab6 R11: 0000000000000000 R12: dffffc0000000000
R13: dffffc0000000000 R14: 0000000000000590 R15: 1ffff110058ca001
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe0f803d0a8 CR3: 00000000123ff000 CR4: 00000000001506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400