program:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xe, 0x1}}}}}]}}]}}, 0x0) (async)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xe, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000c0700548cbfad8f73cd5f93"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"})
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x5, 0x13, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x5, 0x13, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
[ 69.003483][ T4663] Bluetooth: hci0: command tx timeout
[ 69.054774][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 69.058461][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 69.075141][ T5315] sysfs: cannot create duplicate filename '/module/raw_gadget'
[ 69.078403][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full)
[ 69.078417][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.078423][ T5315] Call Trace:
[ 69.078429][ T5315]
[ 69.078434][ T5315] dump_stack_lvl+0x189/0x250
[ 69.078548][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.078563][ T5315] ? __pfx__printk+0x10/0x10
[ 69.078573][ T5315] ? kernfs_path_from_node+0x2b/0x260
[ 69.078615][ T5315] ? kernfs_path_from_node+0x2b/0x260
[ 69.078623][ T5315] ? kernfs_path_from_node+0x2b/0x260
[ 69.078631][ T5315] ? kernfs_path_from_node+0x216/0x260
[ 69.078640][ T5315] sysfs_create_dir_ns+0x259/0x280
[ 69.078650][ T5315] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 69.078658][ T5315] ? do_raw_spin_unlock+0x4d/0x240
[ 69.078668][ T5315] kobject_add_internal+0x59f/0xb40
[ 69.078713][ T5315] kobject_init_and_add+0x125/0x190
[ 69.078729][ T5315] ? __pfx_kobject_init_and_add+0x10/0x10
[ 69.078742][ T5315] ? __kasan_kmalloc+0x93/0xb0
[ 69.078755][ T5315] ? __kmalloc_cache_noprof+0x230/0x3d0
[ 69.078767][ T5315] ? lookup_or_create_module_kobject+0x75/0x170
[ 69.078779][ T5315] lookup_or_create_module_kobject+0xe3/0x170
[ 69.078790][ T5315] module_add_driver+0xb9/0x310
[ 69.078806][ T5315] bus_add_driver+0x391/0x640
[ 69.078820][ T5315] driver_register+0x23a/0x320
[ 69.078836][ T5315] usb_gadget_register_driver_owner+0xf9/0x270
[ 69.078854][ T5315] raw_ioctl+0x149a/0x3c90
[ 69.078869][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.078885][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.078899][ T5315] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 69.078912][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.078926][ T5315] ? __pfx_raw_ioctl+0x10/0x10
[ 69.078942][ T5315] ? count_memcg_event_mm+0x92/0x3b0
[ 69.078957][ T5315] ? __lock_acquire+0xaac/0xd20
[ 69.078979][ T5315] ? __fget_files+0x2a/0x420
[ 69.078995][ T5315] ? __fget_files+0x3a0/0x420
[ 69.079005][ T5315] ? __fget_files+0x2a/0x420
[ 69.079018][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20
[ 69.079032][ T5315] ? __pfx_raw_ioctl+0x10/0x10
[ 69.079043][ T5315] __se_sys_ioctl+0xf9/0x170
[ 69.079054][ T5315] do_syscall_64+0xf6/0x210
[ 69.079067][ T5315] ? clear_bhb_loop+0x45/0xa0
[ 69.079080][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.079090][ T5315] RIP: 0033:0x7f946798e56b
[ 69.079106][ T5315] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 69.079114][ T5315] RSP: 002b:00007f94687d5f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.079126][ T5315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f946798e56b
[ 69.079133][ T5315] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 69.079138][ T5315] RBP: 00007f94687d6fe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 69.079144][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.079149][ T5315] R13: 00007f94687d5fb0 R14: 0000200000000040 R15: 00007f9467ce0320
[ 69.079166][ T5315]
[ 69.079186][ T5315] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory.
[ 69.221473][ T5315] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[ 69.226368][ T5315] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[ 69.229769][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full)
[ 69.234509][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 69.238973][ T5315] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 69.241496][ T5315] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 69.249348][ T5315] RSP: 0018:ffffc9000d3bf840 EFLAGS: 00010002
[ 69.251872][ T5315] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 59889714e9df0900
[ 69.255208][ T5315] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 69.258291][ T5315] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 69.261289][ T5315] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 69.264657][ T5315] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 69.267972][ T5315] FS: 00007f94687d86c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 69.271657][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.274405][ T5315] CR2: 000055c6a8b5fd08 CR3: 0000000042901000 CR4: 0000000000352ef0
[ 69.277627][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.280828][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.284017][ T5315] Call Trace:
[ 69.285490][ T5315]
[ 69.286686][ T5315] __kasan_check_byte+0x12/0x40
[ 69.288733][ T5315] lock_acquire+0x8d/0x360
[ 69.290696][ T5315] ? kobj_kset_leave+0x163/0x190
[ 69.292841][ T5315] _raw_spin_lock_irqsave+0xa7/0xf0
[ 69.295067][ T5315] ? complete+0x28/0x1b0
[ 69.296938][ T5315] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 69.299492][ T5315] ? kobject_init_and_add+0x125/0x190
[ 69.301663][ T5315] complete+0x28/0x1b0
[ 69.303438][ T5315] kobject_put+0x228/0x480
[ 69.305350][ T5315] lookup_or_create_module_kobject+0x150/0x170
[ 69.307924][ T5315] module_add_driver+0xb9/0x310
[ 69.309945][ T5315] bus_add_driver+0x391/0x640
[ 69.311793][ T5315] driver_register+0x23a/0x320
[ 69.313794][ T5315] usb_gadget_register_driver_owner+0xf9/0x270
[ 69.316304][ T5315] raw_ioctl+0x149a/0x3c90
[ 69.318106][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.320466][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.322663][ T5315] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 69.325009][ T5315] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 69.327151][ T5315] ? __pfx_raw_ioctl+0x10/0x10
[ 69.329259][ T5315] ? count_memcg_event_mm+0x92/0x3b0
[ 69.331356][ T5315] ? __lock_acquire+0xaac/0xd20
[ 69.333447][ T5315] ? __fget_files+0x2a/0x420
[ 69.335384][ T5315] ? __fget_files+0x3a0/0x420
[ 69.337379][ T5315] ? __fget_files+0x2a/0x420
[ 69.339359][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20
[ 69.341516][ T5315] ? __pfx_raw_ioctl+0x10/0x10
[ 69.343491][ T5315] __se_sys_ioctl+0xf9/0x170
[ 69.345432][ T5315] do_syscall_64+0xf6/0x210
[ 69.347352][ T5315] ? clear_bhb_loop+0x45/0xa0
[ 69.349333][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.351677][ T5315] RIP: 0033:0x7f946798e56b
[ 69.353431][ T5315] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 69.361184][ T5315] RSP: 002b:00007f94687d5f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 69.364681][ T5315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f946798e56b
[ 69.367767][ T5315] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 69.371171][ T5315] RBP: 00007f94687d6fe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 69.374662][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.377995][ T5315] R13: 00007f94687d5fb0 R14: 0000200000000040 R15: 00007f9467ce0320
[ 69.381585][ T5315]
[ 69.382957][ T5315] Modules linked in:
[ 69.384725][ T5315] ---[ end trace 0000000000000000 ]---
[ 69.386980][ T5315] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 69.389475][ T5315] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 69.397319][ T5315] RSP: 0018:ffffc9000d3bf840 EFLAGS: 00010002
[ 69.399919][ T5315] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 59889714e9df0900
[ 69.403012][ T5315] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 69.406217][ T5315] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 69.409612][ T5315] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 69.412945][ T5315] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 69.416343][ T5315] FS: 00007f94687d86c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 69.419961][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.422585][ T5315] CR2: 000055c6a8b5fd08 CR3: 0000000042901000 CR4: 0000000000352ef0
[ 69.425740][ T5315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 69.428924][ T5315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 69.432180][ T5315] Kernel panic - not syncing: Fatal exception
[ 69.435628][ T5315] Kernel Offset: disabled
[ 69.437852][ T5315] Rebooting in 86400 seconds..