program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb1600 0x28\x00', 0xf) [ 85.402088][ T4648] Bluetooth: hci0: command tx timeout [ 85.492218][ T5325] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 85.496262][ T5325] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 85.499182][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.501897][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.504906][ T5325] RIP: 0010:regmap_get_i2c_bus+0xbe/0xb00 [ 85.506628][ T5325] Code: 31 ff e8 f5 17 95 fb 83 e5 01 0f 85 23 01 00 00 4c 8b 7c 24 10 4d 8d 6f 1c 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 74 08 00 00 41 8b 6d 00 bf 08 00 00 00 [ 85.512398][ T5325] RSP: 0018:ffffc9000f49f3d8 EFLAGS: 00010207 [ 85.514295][ T5325] RAX: dffffc0000000000 RBX: 1ffff11003867803 RCX: 0000000000000002 [ 85.516780][ T5325] RDX: ffff88803ee48000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.519229][ T5325] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 85.521575][ T5325] R10: dffffc0000000000 R11: ffffffff87f79f00 R12: 0000000000000003 [ 85.524049][ T5325] R13: 000000000000001c R14: ffff88801c33c018 R15: 0000000000000000 [ 85.526553][ T5325] FS: 00007f9eee2e96c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 85.529446][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.531529][ T5325] CR2: 00007f7de3edc3a0 CR3: 0000000043ea6000 CR4: 0000000000352ef0 [ 85.533930][ T5325] Call Trace: [ 85.534970][ T5325] [ 85.535945][ T5325] __devm_regmap_init_i2c+0x29/0x80 [ 85.537486][ T5325] stusb160x_probe+0xfd/0x1940 [ 85.538914][ T5325] ? __pfx_hlock_conflict+0x10/0x10 [ 85.540490][ T5325] ? preempt_schedule_thunk+0x16/0x40 [ 85.542047][ T5325] ? preempt_schedule_common+0x82/0xd0 [ 85.543657][ T5325] ? __pfx_stusb160x_probe+0x10/0x10 [ 85.545436][ T5325] ? _raw_spin_unlock+0x3f/0x50 [ 85.546874][ T5325] ? fast_dput+0x469/0x670 [ 85.548323][ T5325] ? dput+0x39/0x60 [ 85.549556][ T5325] ? debugfs_create_dir+0x2a3/0x350 [ 85.551184][ T5325] i2c_device_probe+0x87c/0xbf0 [ 85.552655][ T5325] ? __pfx_i2c_device_probe+0x10/0x10 [ 85.554249][ T5325] ? sysfs_do_create_link_sd+0xe0/0x110 [ 85.555943][ T5325] ? driver_sysfs_add+0x1fe/0x210 [ 85.557598][ T5325] ? __pfx_i2c_device_probe+0x10/0x10 [ 85.559254][ T5325] really_probe+0x254/0xae0 [ 85.560676][ T5325] __driver_probe_device+0x1e8/0x360 [ 85.562267][ T5325] driver_probe_device+0x4f/0x240 [ 85.563706][ T5325] __device_attach_driver+0x270/0x410 [ 85.565324][ T5325] bus_for_each_drv+0x258/0x2f0 [ 85.567104][ T5325] ? __pfx___device_attach_driver+0x10/0x10 [ 85.569282][ T5325] ? __pfx_bus_for_each_drv+0x10/0x10 [ 85.570884][ T5325] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.572461][ T5325] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.574202][ T5325] __device_attach+0x2c4/0x450 [ 85.575678][ T5325] ? __pfx___device_attach+0x10/0x10 [ 85.577283][ T5325] ? do_raw_spin_unlock+0x4d/0x210 [ 85.578779][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 85.580208][ T5325] device_initial_probe+0xa1/0xd0 [ 85.581968][ T5325] bus_probe_device+0x12a/0x220 [ 85.583624][ T5325] device_add+0x7d7/0xb80 [ 85.584922][ T5325] i2c_new_client_device+0xa29/0x1130 [ 85.586946][ T5325] ? __pfx_i2c_new_client_device+0x10/0x10 [ 85.589159][ T5325] ? __mutex_lock+0x30d/0x1550 [ 85.591031][ T5325] ? new_device_store+0x132/0x530 [ 85.592721][ T5325] new_device_store+0x24b/0x530 [ 85.594400][ T5325] ? sysfs_file_kobj+0x1a/0x230 [ 85.596110][ T5325] ? sysfs_file_kobj+0x1a/0x230 [ 85.597957][ T5325] ? __pfx_new_device_store+0x10/0x10 [ 85.599855][ T5325] ? sysfs_file_kobj+0x1a/0x230 [ 85.601290][ T5325] ? sysfs_file_kobj+0x1a/0x230 [ 85.602827][ T5325] ? sysfs_file_kobj+0x1e4/0x230 [ 85.604313][ T5325] ? sysfs_kf_write+0x166/0x260 [ 85.605826][ T5325] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.607381][ T5325] kernfs_fop_write_iter+0x3a4/0x540 [ 85.608966][ T5325] vfs_write+0x612/0xba0 [ 85.610238][ T5325] ? __pfx_vfs_write+0x10/0x10 [ 85.611950][ T5325] ? __fget_files+0x2a/0x420 [ 85.613409][ T5325] ksys_write+0x150/0x270 [ 85.614778][ T5325] ? __pfx_ksys_write+0x10/0x10 [ 85.616274][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.618109][ T5325] do_syscall_64+0x174/0x580 [ 85.619544][ T5325] ? trace_irq_disable+0x3b/0x140 [ 85.621176][ T5325] ? clear_bhb_loop+0x40/0x90 [ 85.622647][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.624494][ T5325] RIP: 0033:0x7f9eed39e019 [ 85.625994][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.632388][ T5325] RSP: 002b:00007f9eee2e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.635074][ T5325] RAX: ffffffffffffffda RBX: 00007f9eed625fa0 RCX: 00007f9eed39e019 [ 85.637522][ T5325] RDX: 000000000000000f RSI: 0000200000000300 RDI: 0000000000000003 [ 85.639789][ T5325] RBP: 00007f9eed43500c R08: 0000000000000000 R09: 0000000000000000 [ 85.642203][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.644669][ T5325] R13: 00007f9eed626038 R14: 00007f9eed625fa0 R15: 00007fffa2cd6e88 [ 85.647098][ T5325] [ 85.648048][ T5325] Modules linked in: [ 85.649835][ T5325] ---[ end trace 0000000000000000 ]--- [ 85.666652][ T5325] RIP: 0010:regmap_get_i2c_bus+0xbe/0xb00 [ 85.669258][ T5325] Code: 31 ff e8 f5 17 95 fb 83 e5 01 0f 85 23 01 00 00 4c 8b 7c 24 10 4d 8d 6f 1c 4d 89 ec 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 04 84 c0 0f 85 74 08 00 00 41 8b 6d 00 bf 08 00 00 00 [ 85.676066][ T5325] RSP: 0018:ffffc9000f49f3d8 EFLAGS: 00010207 [ 85.678920][ T5325] RAX: dffffc0000000000 RBX: 1ffff11003867803 RCX: 0000000000000002 [ 85.681842][ T5325] RDX: ffff88803ee48000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.684809][ T5325] RBP: 0000000000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 85.687856][ T5325] R10: dffffc0000000000 R11: ffffffff87f79f00 R12: 0000000000000003 [ 85.690641][ T5325] R13: 000000000000001c R14: ffff88801c33c018 R15: 0000000000000000 [ 85.693423][ T5325] FS: 00007f9eee2e96c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 85.696661][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.699254][ T5325] CR2: 00007f9eed5f36b8 CR3: 0000000043ea6000 CR4: 0000000000352ef0 [ 85.702063][ T5325] Kernel panic - not syncing: Fatal exception [ 85.704461][ T5325] Kernel Offset: disabled [ 85.705902][ T5325] Rebooting in 86400 seconds..