program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x0, 0x37, 0x0, "c3218d82e7896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8)
syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async)
r1 = syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
[ 68.367102][ T5296] Bluetooth: hci0: command tx timeout
[ 68.440942][ T5310] sysfs: cannot create duplicate filename '/module/raw_gadget'
[ 68.443964][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full)
[ 68.443974][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.443978][ T5310] Call Trace:
[ 68.443983][ T5310]
[ 68.443987][ T5310] dump_stack_lvl+0x189/0x250
[ 68.444106][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.444115][ T5310] ? __pfx__printk+0x10/0x10
[ 68.444122][ T5310] ? kernfs_path_from_node+0x2b/0x260
[ 68.444157][ T5310] ? kernfs_path_from_node+0x2b/0x260
[ 68.444168][ T5310] ? kernfs_path_from_node+0x2b/0x260
[ 68.444181][ T5310] ? kernfs_path_from_node+0x216/0x260
[ 68.444194][ T5310] sysfs_create_dir_ns+0x259/0x280
[ 68.444208][ T5310] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 68.444220][ T5310] ? do_raw_spin_unlock+0x4d/0x240
[ 68.444235][ T5310] kobject_add_internal+0x59f/0xb40
[ 68.444282][ T5310] kobject_init_and_add+0x125/0x190
[ 68.444300][ T5310] ? __pfx_kobject_init_and_add+0x10/0x10
[ 68.444313][ T5310] ? __kasan_kmalloc+0x93/0xb0
[ 68.444325][ T5310] ? __kmalloc_cache_noprof+0x230/0x3d0
[ 68.444337][ T5310] ? lookup_or_create_module_kobject+0x75/0x170
[ 68.444351][ T5310] lookup_or_create_module_kobject+0xe3/0x170
[ 68.444362][ T5310] module_add_driver+0xb9/0x310
[ 68.444377][ T5310] bus_add_driver+0x391/0x640
[ 68.444394][ T5310] driver_register+0x23a/0x320
[ 68.444409][ T5310] usb_gadget_register_driver_owner+0xf9/0x270
[ 68.444426][ T5310] raw_ioctl+0x149a/0x3c90
[ 68.444445][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.444462][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.444475][ T5310] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 68.444491][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.444506][ T5310] ? __pfx_raw_ioctl+0x10/0x10
[ 68.444522][ T5310] ? count_memcg_event_mm+0x92/0x3b0
[ 68.444538][ T5310] ? __lock_acquire+0xaac/0xd20
[ 68.444561][ T5310] ? __fget_files+0x2a/0x420
[ 68.444578][ T5310] ? __fget_files+0x3a0/0x420
[ 68.444595][ T5310] ? __fget_files+0x2a/0x420
[ 68.444609][ T5310] ? bpf_lsm_file_ioctl+0x9/0x20
[ 68.444620][ T5310] ? __pfx_raw_ioctl+0x10/0x10
[ 68.444635][ T5310] __se_sys_ioctl+0xf9/0x170
[ 68.444646][ T5310] do_syscall_64+0xf6/0x210
[ 68.444659][ T5310] ? clear_bhb_loop+0x45/0xa0
[ 68.444672][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.444683][ T5310] RIP: 0033:0x7fa40b58e56b
[ 68.444694][ T5310] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 68.444702][ T5310] RSP: 002b:00007fa40c30df10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.444715][ T5310] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa40b58e56b
[ 68.444722][ T5310] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[ 68.444728][ T5310] RBP: 00007fa40c30efe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 68.444734][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.444739][ T5310] R13: 00007fa40c30dfb0 R14: 00002000000001c0 R15: 00007fa40b8e0b88
[ 68.444754][ T5310]
[ 68.444774][ T5310] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory.
[ 68.595192][ T5310] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[ 68.599618][ T5310] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[ 68.603086][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full)
[ 68.608196][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.612838][ T5310] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 68.615285][ T5310] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 68.623039][ T5310] RSP: 0018:ffffc9000d3b7840 EFLAGS: 00010002
[ 68.625650][ T5310] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: c40c778bb33e1500
[ 68.628655][ T5310] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 68.631891][ T5310] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 68.635158][ T5310] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 68.638241][ T5310] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 68.641285][ T5310] FS: 00007fa40c3106c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 68.644965][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.647741][ T5310] CR2: 00007fa40c30efe0 CR3: 0000000033c2e000 CR4: 0000000000352ef0
[ 68.650985][ T5310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.654194][ T5310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.657336][ T5310] Call Trace:
[ 68.658715][ T5310]
[ 68.659968][ T5310] __kasan_check_byte+0x12/0x40
[ 68.661999][ T5310] lock_acquire+0x8d/0x360
[ 68.663864][ T5310] ? kobj_kset_leave+0x163/0x190
[ 68.665941][ T5310] _raw_spin_lock_irqsave+0xa7/0xf0
[ 68.668103][ T5310] ? complete+0x28/0x1b0
[ 68.669822][ T5310] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 68.672271][ T5310] ? kobject_init_and_add+0x125/0x190
[ 68.674479][ T5310] complete+0x28/0x1b0
[ 68.676186][ T5310] kobject_put+0x228/0x480
[ 68.677977][ T5310] lookup_or_create_module_kobject+0x150/0x170
[ 68.680470][ T5310] module_add_driver+0xb9/0x310
[ 68.682446][ T5310] bus_add_driver+0x391/0x640
[ 68.684392][ T5310] driver_register+0x23a/0x320
[ 68.686371][ T5310] usb_gadget_register_driver_owner+0xf9/0x270
[ 68.688935][ T5310] raw_ioctl+0x149a/0x3c90
[ 68.690813][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.693159][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.695480][ T5310] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 68.697816][ T5310] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.700170][ T5310] ? __pfx_raw_ioctl+0x10/0x10
[ 68.702164][ T5310] ? count_memcg_event_mm+0x92/0x3b0
[ 68.704332][ T5310] ? __lock_acquire+0xaac/0xd20
[ 68.706346][ T5310] ? __fget_files+0x2a/0x420
[ 68.708294][ T5310] ? __fget_files+0x3a0/0x420
[ 68.710268][ T5310] ? __fget_files+0x2a/0x420
[ 68.712293][ T5310] ? bpf_lsm_file_ioctl+0x9/0x20
[ 68.714374][ T5310] ? __pfx_raw_ioctl+0x10/0x10
[ 68.716394][ T5310] __se_sys_ioctl+0xf9/0x170
[ 68.718308][ T5310] do_syscall_64+0xf6/0x210
[ 68.720160][ T5310] ? clear_bhb_loop+0x45/0xa0
[ 68.722118][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.724647][ T5310] RIP: 0033:0x7fa40b58e56b
[ 68.726559][ T5310] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 68.734498][ T5310] RSP: 002b:00007fa40c30df10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.737724][ T5310] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa40b58e56b
[ 68.741140][ T5310] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[ 68.744532][ T5310] RBP: 00007fa40c30efe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 68.747791][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.751053][ T5310] R13: 00007fa40c30dfb0 R14: 00002000000001c0 R15: 00007fa40b8e0b88
[ 68.754344][ T5310]
[ 68.755675][ T5310] Modules linked in:
[ 68.757363][ T5310] ---[ end trace 0000000000000000 ]---
[ 68.759600][ T5310] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 68.762021][ T5310] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 68.770071][ T5310] RSP: 0018:ffffc9000d3b7840 EFLAGS: 00010002
[ 68.772607][ T5310] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: c40c778bb33e1500
[ 68.775828][ T5310] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 68.780944][ T5310] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 68.784081][ T5310] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 68.787396][ T5310] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 68.790706][ T5310] FS: 00007fa40c3106c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 68.794391][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.797077][ T5310] CR2: 00007fa40c30efe0 CR3: 0000000033c2e000 CR4: 0000000000352ef0
[ 68.800324][ T5310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.803601][ T5310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.806876][ T5310] Kernel panic - not syncing: Fatal exception
[ 68.810111][ T5310] Kernel Offset: disabled
[ 68.812272][ T5310] Rebooting in 86400 seconds..