program:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x1d, &(0x7f00000000c0), 0xd8)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, "03000000"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x4, "03000000"}})
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20)
close(0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/i2c-2/new_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000800)='tcpci 0x50\x00', 0xb)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/typec/port0/port_type\x00', 0x0, 0x0)

[   93.496478][ T5284] Bluetooth: hci0: command tx timeout
[   93.834606][  T803] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.988818][  T803] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[   93.992562][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.022080][  T803] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 002
[   94.687875][  T803] i2c i2c-2: failure reading functionality
[   94.717285][  T803] i2c i2c-2: connected i2c-tiny-usb device
[   94.747957][ T5327] i2c i2c-2: failure reading functionality
[   94.752902][  T803] usb 5-1: USB disconnect, device number 2
[   94.766036][ T5327] i2c i2c-2: failure reading functionality
[   94.779093][ T5327] i2c i2c-2: failure reading functionality
[   94.797756][ T5327] ------------[ cut here ]------------
[   94.800360][ T5327] inode->i_nlink == 0
[   94.800373][ T5327] WARNING: fs/inode.c:408 at drop_nlink+0xc5/0x110, CPU#0: syz.0.0/5327
[   94.805842][ T5327] Modules linked in:
[   94.807778][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   94.811679][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.816448][ T5327] RIP: 0010:drop_nlink+0xc5/0x110
[   94.818636][ T5327] Code: 98 07 00 00 be 08 00 00 00 e8 47 69 e5 ff 3e 48 ff 83 98 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9c 34 76 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
[   94.826850][ T5327] RSP: 0018:ffffc9000f0af538 EFLAGS: 00010283
[   94.829571][ T5327] RAX: ffffffff8250f084 RBX: ffff8880442289a0 RCX: 0000000000100000
[   94.832604][ T5327] RDX: ffffc90020802000 RSI: 0000000000002582 RDI: 0000000000002583
[   94.835866][ T5327] RBP: 0000000000000000 R08: ffffffff9057bf37 R09: 1ffffffff20af7e6
[   94.839053][ T5327] R10: dffffc0000000000 R11: fffffbfff20af7e7 R12: 1ffff1100884513d
[   94.842349][ T5327] R13: ffff88801325e758 R14: ffff8880442289e8 R15: dffffc0000000000
[   94.845906][ T5327] FS:  00007fd9732876c0(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000
[   94.849716][ T5327] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.852528][ T5327] CR2: 000055cc36eb6218 CR3: 000000001d323000 CR4: 0000000000352ef0
[   94.856061][ T5327] Call Trace:
[   94.857533][ T5327]  <TASK>
[   94.858817][ T5327]  __simple_recursive_removal+0x491/0x520
[   94.861262][ T5327]  ? mntput+0x65/0xc0
[   94.862887][ T5327]  ? __pfx_remove_one+0x10/0x10
[   94.865232][ T5327]  debugfs_remove+0x5b/0x70
[   94.867237][ T5327]  i2c_device_probe+0x8dc/0xbf0
[   94.869494][ T5327]  ? __pfx_i2c_device_probe+0x10/0x10
[   94.871786][ T5327]  ? sysfs_do_create_link_sd+0xe0/0x110
[   94.874143][ T5327]  ? driver_sysfs_add+0x1fe/0x210
[   94.876419][ T5327]  ? __pfx_i2c_device_probe+0x10/0x10
[   94.878691][ T5327]  really_probe+0x254/0xae0
[   94.880695][ T5327]  __driver_probe_device+0x1e8/0x360
[   94.883001][ T5327]  driver_probe_device+0x4f/0x240
[   94.885290][ T5327]  __device_attach_driver+0x270/0x410
[   94.887606][ T5327]  bus_for_each_drv+0x258/0x2f0
[   94.889551][ T5327]  ? __pfx___device_attach_driver+0x10/0x10
[   94.891867][ T5327]  ? __pfx_bus_for_each_drv+0x10/0x10
[   94.894073][ T5327]  ? lockdep_hardirqs_on+0x7a/0x110
[   94.897047][ T5327]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   94.899348][ T5327]  __device_attach+0x2c4/0x450
[   94.901586][ T5327]  ? __pfx___device_attach+0x10/0x10
[   94.904342][ T5327]  ? do_raw_spin_unlock+0x4d/0x210
[   94.906779][ T5327]  ? _raw_spin_unlock+0x28/0x50
[   94.908863][ T5327]  device_initial_probe+0xa1/0xd0
[   94.910913][ T5327]  bus_probe_device+0x12a/0x220
[   94.912417][ T5327]  device_add+0x7d7/0xb80
[   94.913767][ T5327]  i2c_new_client_device+0xa29/0x1130
[   94.915963][ T5327]  ? __pfx_i2c_new_client_device+0x10/0x10
[   94.918466][ T5327]  ? __mutex_lock+0x30d/0x1550
[   94.920384][ T5327]  ? new_device_store+0x132/0x530
[   94.922481][ T5327]  new_device_store+0x24b/0x530
[   94.924387][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   94.926358][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   94.928256][ T5327]  ? __pfx_new_device_store+0x10/0x10
[   94.930525][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   94.932597][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   94.934854][ T5327]  ? sysfs_file_kobj+0x1e4/0x230
[   94.937090][ T5327]  ? sysfs_kf_write+0x166/0x260
[   94.939439][ T5327]  ? __pfx_sysfs_kf_write+0x10/0x10
[   94.941695][ T5327]  kernfs_fop_write_iter+0x3a4/0x540
[   94.943950][ T5327]  vfs_write+0x612/0xba0
[   94.945936][ T5327]  ? __pfx_vfs_write+0x10/0x10
[   94.948006][ T5327]  ? __fget_files+0x2a/0x420
[   94.950048][ T5327]  ksys_write+0x150/0x270
[   94.951876][ T5327]  ? __pfx_ksys_write+0x10/0x10
[   94.953973][ T5327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.956607][ T5327]  do_syscall_64+0x174/0x580
[   94.958598][ T5327]  ? trace_irq_disable+0x3b/0x140
[   94.960656][ T5327]  ? clear_bhb_loop+0x40/0x90
[   94.962468][ T5327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.964819][ T5327] RIP: 0033:0x7fd97239e019
[   94.966534][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.973991][ T5327] RSP: 002b:00007fd973286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   94.977505][ T5327] RAX: ffffffffffffffda RBX: 00007fd972626090 RCX: 00007fd97239e019
[   94.980613][ T5327] RDX: 000000000000000b RSI: 0000200000000800 RDI: 0000000000000003
[   94.984130][ T5327] RBP: 00007fd97243500c R08: 0000000000000000 R09: 0000000000000000
[   94.987625][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.991017][ T5327] R13: 00007fd972626128 R14: 00007fd972626090 R15: 00007ffcb5017a38
[   94.995260][ T5327]  </TASK>
[   94.996701][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   95.000085][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   95.003672][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.007602][ T5327] Call Trace:
[   95.008948][ T5327]  <TASK>
[   95.010182][ T5327]  vpanic+0x56c/0xa60
[   95.011782][ T5327]  ? __pfx__printk+0x10/0x10
[   95.013637][ T5327]  ? __pfx_vpanic+0x10/0x10
[   95.015421][ T5327]  ? is_bpf_text_address+0x292/0x2b0
[   95.017581][ T5327]  ? is_bpf_text_address+0x26/0x2b0
[   95.019837][ T5327]  panic+0xc5/0xd0
[   95.021485][ T5327]  ? __pfx_panic+0x10/0x10
[   95.023196][ T5327]  __warn+0x315/0x4c0
[   95.024681][ T5327]  ? drop_nlink+0xc5/0x110
[   95.026467][ T5327]  ? drop_nlink+0xc5/0x110
[   95.028410][ T5327]  __report_bug+0x276/0x570
[   95.030556][ T5327]  ? drop_nlink+0xc5/0x110
[   95.032273][ T5327]  ? __pfx___report_bug+0x10/0x10
[   95.034378][ T5327]  ? inode_set_ctime_to_ts+0x116/0x2e0
[   95.036553][ T5327]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[   95.039097][ T5327]  ? lockdep_hardirqs_on+0x7a/0x110
[   95.041369][ T5327]  ? drop_nlink+0xc5/0x110
[   95.043294][ T5327]  report_bug+0x16a/0x220
[   95.045130][ T5327]  ? drop_nlink+0xc5/0x110
[   95.046914][ T5327]  ? drop_nlink+0xc7/0x110
[   95.048472][ T5327]  handle_bug+0x9c/0x200
[   95.050166][ T5327]  exc_invalid_op+0x1a/0x50
[   95.052004][ T5327]  asm_exc_invalid_op+0x1a/0x20
[   95.054146][ T5327] RIP: 0010:drop_nlink+0xc5/0x110
[   95.056107][ T5327] Code: 98 07 00 00 be 08 00 00 00 e8 47 69 e5 ff 3e 48 ff 83 98 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9c 34 76 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
[   95.063867][ T5327] RSP: 0018:ffffc9000f0af538 EFLAGS: 00010283
[   95.066562][ T5327] RAX: ffffffff8250f084 RBX: ffff8880442289a0 RCX: 0000000000100000
[   95.070052][ T5327] RDX: ffffc90020802000 RSI: 0000000000002582 RDI: 0000000000002583
[   95.073294][ T5327] RBP: 0000000000000000 R08: ffffffff9057bf37 R09: 1ffffffff20af7e6
[   95.076579][ T5327] R10: dffffc0000000000 R11: fffffbfff20af7e7 R12: 1ffff1100884513d
[   95.079821][ T5327] R13: ffff88801325e758 R14: ffff8880442289e8 R15: dffffc0000000000
[   95.082955][ T5327]  ? drop_nlink+0xc4/0x110
[   95.084782][ T5327]  ? drop_nlink+0xc4/0x110
[   95.086669][ T5327]  __simple_recursive_removal+0x491/0x520
[   95.088966][ T5327]  ? mntput+0x65/0xc0
[   95.090585][ T5327]  ? __pfx_remove_one+0x10/0x10
[   95.092507][ T5327]  debugfs_remove+0x5b/0x70
[   95.094409][ T5327]  i2c_device_probe+0x8dc/0xbf0
[   95.096500][ T5327]  ? __pfx_i2c_device_probe+0x10/0x10
[   95.098748][ T5327]  ? sysfs_do_create_link_sd+0xe0/0x110
[   95.101091][ T5327]  ? driver_sysfs_add+0x1fe/0x210
[   95.103245][ T5327]  ? __pfx_i2c_device_probe+0x10/0x10
[   95.105533][ T5327]  really_probe+0x254/0xae0
[   95.107448][ T5327]  __driver_probe_device+0x1e8/0x360
[   95.109691][ T5327]  driver_probe_device+0x4f/0x240
[   95.111974][ T5327]  __device_attach_driver+0x270/0x410
[   95.114682][ T5327]  bus_for_each_drv+0x258/0x2f0
[   95.116874][ T5327]  ? __pfx___device_attach_driver+0x10/0x10
[   95.119560][ T5327]  ? __pfx_bus_for_each_drv+0x10/0x10
[   95.121947][ T5327]  ? lockdep_hardirqs_on+0x7a/0x110
[   95.124302][ T5327]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   95.126920][ T5327]  __device_attach+0x2c4/0x450
[   95.129013][ T5327]  ? __pfx___device_attach+0x10/0x10
[   95.131303][ T5327]  ? do_raw_spin_unlock+0x4d/0x210
[   95.133471][ T5327]  ? _raw_spin_unlock+0x28/0x50
[   95.135604][ T5327]  device_initial_probe+0xa1/0xd0
[   95.137849][ T5327]  bus_probe_device+0x12a/0x220
[   95.140052][ T5327]  device_add+0x7d7/0xb80
[   95.141979][ T5327]  i2c_new_client_device+0xa29/0x1130
[   95.144320][ T5327]  ? __pfx_i2c_new_client_device+0x10/0x10
[   95.146897][ T5327]  ? __mutex_lock+0x30d/0x1550
[   95.149016][ T5327]  ? new_device_store+0x132/0x530
[   95.151314][ T5327]  new_device_store+0x24b/0x530
[   95.153496][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   95.155447][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   95.157446][ T5327]  ? __pfx_new_device_store+0x10/0x10
[   95.159657][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   95.161699][ T5327]  ? sysfs_file_kobj+0x1a/0x230
[   95.163726][ T5327]  ? sysfs_file_kobj+0x1e4/0x230
[   95.165559][ T5327]  ? sysfs_kf_write+0x166/0x260
[   95.167341][ T5327]  ? __pfx_sysfs_kf_write+0x10/0x10
[   95.169563][ T5327]  kernfs_fop_write_iter+0x3a4/0x540
[   95.171848][ T5327]  vfs_write+0x612/0xba0
[   95.173751][ T5327]  ? __pfx_vfs_write+0x10/0x10
[   95.175871][ T5327]  ? __fget_files+0x2a/0x420
[   95.177920][ T5327]  ksys_write+0x150/0x270
[   95.179882][ T5327]  ? __pfx_ksys_write+0x10/0x10
[   95.182032][ T5327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.184686][ T5327]  do_syscall_64+0x174/0x580
[   95.186603][ T5327]  ? trace_irq_disable+0x3b/0x140
[   95.188728][ T5327]  ? clear_bhb_loop+0x40/0x90
[   95.190654][ T5327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.193080][ T5327] RIP: 0033:0x7fd97239e019
[   95.195035][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.202382][ T5327] RSP: 002b:00007fd973286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.205455][ T5327] RAX: ffffffffffffffda RBX: 00007fd972626090 RCX: 00007fd97239e019
[   95.208571][ T5327] RDX: 000000000000000b RSI: 0000200000000800 RDI: 0000000000000003
[   95.211967][ T5327] RBP: 00007fd97243500c R08: 0000000000000000 R09: 0000000000000000
[   95.215190][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.218432][ T5327] R13: 00007fd972626128 R14: 00007fd972626090 R15: 00007ffcb5017a38
[   95.221610][ T5327]  </TASK>
[   95.223235][ T5327] Kernel Offset: disabled
[   95.224962][ T5327] Rebooting in 86400 seconds..