program:
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x0)
r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r2)
syz_usb_disconnect(r1)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r3)
syz_usb_disconnect(r2)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
[ 69.348127][ T4658] Bluetooth: hci0: command tx timeout
[ 69.496351][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 69.502390][ T5320] sysfs: cannot create duplicate filename '/module/raw_gadget'
[ 69.510086][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full)
[ 69.510104][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.510110][ T5320] Call Trace:
[ 69.510114][ T5320]
[ 69.510119][ T5320] dump_stack_lvl+0x189/0x250
[ 69.510234][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.510249][ T5320] ? __pfx__printk+0x10/0x10
[ 69.510260][ T5320] ? kernfs_path_from_node+0x2b/0x260
[ 69.510301][ T5320] ? kernfs_path_from_node+0x2b/0x260
[ 69.510314][ T5320] ? kernfs_path_from_node+0x2b/0x260
[ 69.510328][ T5320] ? kernfs_path_from_node+0x216/0x260
[ 69.510344][ T5320] sysfs_create_dir_ns+0x259/0x280
[ 69.510366][ T5320] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 69.510381][ T5320] ? do_raw_spin_unlock+0x4d/0x240
[ 69.510396][ T5320] kobject_add_internal+0x59f/0xb40
[ 69.510443][ T5320] kobject_init_and_add+0x125/0x190
[ 69.510460][ T5320] ? __pfx_kobject_init_and_add+0x10/0x10
[ 69.510474][ T5320] ? __kasan_kmalloc+0x93/0xb0
[ 69.510488][ T5320] ? __kmalloc_cache_noprof+0x230/0x3d0
[ 69.510501][ T5320] ? lookup_or_create_module_kobject+0x75/0x170
[ 69.510521][ T5320] lookup_or_create_module_kobject+0xe3/0x170
[ 69.510539][ T5320] module_add_driver+0xb9/0x310
[ 69.510555][ T5320] bus_add_driver+0x391/0x640
[ 69.510571][ T5320] driver_register+0x23a/0x320
[ 69.510586][ T5320] usb_gadget_register_driver_owner+0xf9/0x270
[ 69.510606][ T5320] raw_ioctl+0x149a/0x3c90
[ 69.510624][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.510641][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.510657][ T5320] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 69.510672][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.510688][ T5320] ? __pfx_raw_ioctl+0x10/0x10
[ 69.510712][ T5320] ? __lock_acquire+0xaac/0xd20
[ 69.510738][ T5320] ? __fget_files+0x2a/0x420
[ 69.510754][ T5320] ? __fget_files+0x3a0/0x420
[ 69.510766][ T5320] ? __fget_files+0x2a/0x420
[ 69.510781][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20
[ 69.510795][ T5320] ? __pfx_raw_ioctl+0x10/0x10
[ 69.510808][ T5320] __se_sys_ioctl+0xf9/0x170
[ 69.510821][ T5320] do_syscall_64+0xf6/0x210
[ 69.510834][ T5320] ? clear_bhb_loop+0x45/0xa0
[ 69.510849][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.510859][ T5320] RIP: 0033:0x7fcb4c78e56b
[ 69.510869][ T5320] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 69.510878][ T5320] RSP: 002b:00007fcb4d529f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.510890][ T5320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcb4c78e56b
[ 69.510897][ T5320] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 69.510903][ T5320] RBP: 00007fcb4d52afe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 69.510910][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.510915][ T5320] R13: 00007fcb4d529fb0 R14: 0000200000000140 R15: 00007fcb4cae0320
[ 69.510933][ T5320]
[ 69.510953][ T5320] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory.
[ 69.655068][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 69.660618][ T5320] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[ 69.665471][ T5320] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[ 69.668878][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full)
[ 69.673973][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.678533][ T5320] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 69.681086][ T5320] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 69.689170][ T5320] RSP: 0018:ffffc9000d6d7840 EFLAGS: 00010002
[ 69.691829][ T5320] RAX: dffffc0000000000 RBX: ffffffff8b589807 RCX: 7ba889d53e2cef00
[ 69.695113][ T5320] RDX: 0000000000000000 RSI: ffffffff8b589807 RDI: 0000000000000004
[ 69.698452][ T5320] RBP: ffffffff819b39d8 R08: 0000000000000001 R09: 0000000000000000
[ 69.701765][ T5320] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 69.705049][ T5320] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 69.708291][ T5320] FS: 00007fcb4d52c6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 69.711986][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.714551][ T5320] CR2: 00007fcb4d56dfc8 CR3: 00000000414fb000 CR4: 0000000000352ef0
[ 69.717922][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.721346][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.724807][ T5320] Call Trace:
[ 69.726189][ T5320]
[ 69.727485][ T5320] __kasan_check_byte+0x12/0x40
[ 69.729499][ T5320] lock_acquire+0x8d/0x360
[ 69.731509][ T5320] ? kobj_kset_leave+0x163/0x190
[ 69.733513][ T5320] _raw_spin_lock_irqsave+0xa7/0xf0
[ 69.736413][ T5320] ? complete+0x28/0x1b0
[ 69.738276][ T5320] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 69.740850][ T5320] ? kobject_init_and_add+0x125/0x190
[ 69.743333][ T5320] complete+0x28/0x1b0
[ 69.745217][ T5320] kobject_put+0x228/0x480
[ 69.747297][ T5320] lookup_or_create_module_kobject+0x150/0x170
[ 69.750051][ T5320] module_add_driver+0xb9/0x310
[ 69.752068][ T5320] bus_add_driver+0x391/0x640
[ 69.754065][ T5320] driver_register+0x23a/0x320
[ 69.756080][ T5320] usb_gadget_register_driver_owner+0xf9/0x270
[ 69.758801][ T5320] raw_ioctl+0x149a/0x3c90
[ 69.760777][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.763143][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.765450][ T5320] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 69.767809][ T5320] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.770193][ T5320] ? __pfx_raw_ioctl+0x10/0x10
[ 69.772252][ T5320] ? __lock_acquire+0xaac/0xd20
[ 69.774578][ T5320] ? __fget_files+0x2a/0x420
[ 69.776643][ T5320] ? __fget_files+0x3a0/0x420
[ 69.778786][ T5320] ? __fget_files+0x2a/0x420
[ 69.780782][ T5320] ? bpf_lsm_file_ioctl+0x9/0x20
[ 69.782908][ T5320] ? __pfx_raw_ioctl+0x10/0x10
[ 69.784889][ T5320] __se_sys_ioctl+0xf9/0x170
[ 69.786997][ T5320] do_syscall_64+0xf6/0x210
[ 69.788934][ T5320] ? clear_bhb_loop+0x45/0xa0
[ 69.790913][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.793433][ T5320] RIP: 0033:0x7fcb4c78e56b
[ 69.795416][ T5320] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 69.803603][ T5320] RSP: 002b:00007fcb4d529f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.807175][ T5320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcb4c78e56b
[ 69.810560][ T5320] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 69.813916][ T5320] RBP: 00007fcb4d52afe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 69.817282][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.820625][ T5320] R13: 00007fcb4d529fb0 R14: 0000200000000140 R15: 00007fcb4cae0320
[ 69.823916][ T5320]
[ 69.825237][ T5320] Modules linked in:
[ 69.826906][ T5320] ---[ end trace 0000000000000000 ]---
[ 69.829094][ T5320] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 69.831498][ T5320] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 69.839542][ T5320] RSP: 0018:ffffc9000d6d7840 EFLAGS: 00010002
[ 69.842158][ T5320] RAX: dffffc0000000000 RBX: ffffffff8b589807 RCX: 7ba889d53e2cef00
[ 69.845303][ T5320] RDX: 0000000000000000 RSI: ffffffff8b589807 RDI: 0000000000000004
[ 69.848705][ T5320] RBP: ffffffff819b39d8 R08: 0000000000000001 R09: 0000000000000000
[ 69.851966][ T5320] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 69.855087][ T5320] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 69.858590][ T5320] FS: 00007fcb4d52c6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 69.862390][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.865258][ T5320] CR2: 00007fcb4d56dfc8 CR3: 00000000414fb000 CR4: 0000000000352ef0
[ 69.868627][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.872051][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.875309][ T5320] Kernel panic - not syncing: Fatal exception
[ 69.878417][ T5320] Kernel Offset: disabled
[ 69.880294][ T5320] Rebooting in 86400 seconds..