program:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev(r2, &(0x7f0000002940)=[{&(0x7f0000001500)="d4", 0x1}], 0x1, 0x80, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fea10080bd2dca8a9848a3c728f1c46b7b31afdc88e51c47f40b2b6c0100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x40000)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}, 0x98}) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x0, @rand_addr=0x64010102}, {0x2, 0x0, @broadcast}, 0x98})
[ 68.572432][ T4657] Bluetooth: hci0: command tx timeout
[ 68.614321][ T5311] sysfs: cannot create duplicate filename '/module/raw_gadget'
[ 68.617589][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full)
[ 68.617604][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.617612][ T5311] Call Trace:
[ 68.617617][ T5311]
[ 68.617622][ T5311] dump_stack_lvl+0x189/0x250
[ 68.617730][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.617746][ T5311] ? __pfx__printk+0x10/0x10
[ 68.617757][ T5311] ? kernfs_path_from_node+0x2b/0x260
[ 68.617799][ T5311] ? kernfs_path_from_node+0x2b/0x260
[ 68.617812][ T5311] ? kernfs_path_from_node+0x2b/0x260
[ 68.617827][ T5311] ? kernfs_path_from_node+0x216/0x260
[ 68.617843][ T5311] sysfs_create_dir_ns+0x259/0x280
[ 68.617859][ T5311] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 68.617874][ T5311] ? do_raw_spin_unlock+0x4d/0x240
[ 68.617889][ T5311] kobject_add_internal+0x59f/0xb40
[ 68.617936][ T5311] kobject_init_and_add+0x125/0x190
[ 68.617954][ T5311] ? __pfx_kobject_init_and_add+0x10/0x10
[ 68.617968][ T5311] ? __kasan_kmalloc+0x93/0xb0
[ 68.617982][ T5311] ? __kmalloc_cache_noprof+0x230/0x3d0
[ 68.617995][ T5311] ? lookup_or_create_module_kobject+0x75/0x170
[ 68.618009][ T5311] lookup_or_create_module_kobject+0xe3/0x170
[ 68.618022][ T5311] module_add_driver+0xb9/0x310
[ 68.618039][ T5311] bus_add_driver+0x391/0x640
[ 68.618054][ T5311] driver_register+0x23a/0x320
[ 68.618071][ T5311] usb_gadget_register_driver_owner+0xf9/0x270
[ 68.618090][ T5311] raw_ioctl+0x149a/0x3c90
[ 68.618113][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.618131][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.618148][ T5311] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 68.618163][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.618179][ T5311] ? __pfx_raw_ioctl+0x10/0x10
[ 68.618192][ T5311] ? __seccomp_filter+0x765/0x1a40
[ 68.618218][ T5311] ? __lock_acquire+0xaac/0xd20
[ 68.618244][ T5311] ? __fget_files+0x2a/0x420
[ 68.618261][ T5311] ? __fget_files+0x3a0/0x420
[ 68.618273][ T5311] ? __fget_files+0x2a/0x420
[ 68.618289][ T5311] ? bpf_lsm_file_ioctl+0x9/0x20
[ 68.618303][ T5311] ? __pfx_raw_ioctl+0x10/0x10
[ 68.618316][ T5311] __se_sys_ioctl+0xf9/0x170
[ 68.618329][ T5311] do_syscall_64+0xf6/0x210
[ 68.618341][ T5311] ? clear_bhb_loop+0x45/0xa0
[ 68.618351][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.618361][ T5311] RIP: 0033:0x7f998f18e56b
[ 68.618370][ T5311] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 68.618377][ T5311] RSP: 002b:00007f99900c0f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.618389][ T5311] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f998f18e56b
[ 68.618395][ T5311] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 68.618401][ T5311] RBP: 00007f99900c1fe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 68.618407][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.618413][ T5311] R13: 00007f99900c0fb0 R14: 0000200000000bc0 R15: 00007f998f4e0b88
[ 68.618428][ T5311]
[ 68.618445][ T5311] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory.
[ 68.774848][ T5311] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[ 68.779912][ T5311] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[ 68.783491][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full)
[ 68.787743][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.792225][ T5311] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 68.794832][ T5311] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 68.802873][ T5311] RSP: 0018:ffffc9000d2f7840 EFLAGS: 00010002
[ 68.805502][ T5311] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: b7909dca0be20d00
[ 68.808770][ T5311] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 68.812136][ T5311] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 68.815526][ T5311] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 68.818904][ T5311] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 68.822296][ T5311] FS: 00007f99900c36c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 68.826047][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.828816][ T5311] CR2: 00007f99900c1fe0 CR3: 0000000035464000 CR4: 0000000000352ef0
[ 68.832273][ T5311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.835646][ T5311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.839066][ T5311] Call Trace:
[ 68.840506][ T5311]
[ 68.841844][ T5311] __kasan_check_byte+0x12/0x40
[ 68.843955][ T5311] lock_acquire+0x8d/0x360
[ 68.845890][ T5311] ? kobj_kset_leave+0x163/0x190
[ 68.848017][ T5311] _raw_spin_lock_irqsave+0xa7/0xf0
[ 68.850269][ T5311] ? complete+0x28/0x1b0
[ 68.852157][ T5311] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 68.854782][ T5311] ? kobject_init_and_add+0x125/0x190
[ 68.857148][ T5311] complete+0x28/0x1b0
[ 68.858929][ T5311] kobject_put+0x228/0x480
[ 68.860851][ T5311] lookup_or_create_module_kobject+0x150/0x170
[ 68.863556][ T5311] module_add_driver+0xb9/0x310
[ 68.865713][ T5311] bus_add_driver+0x391/0x640
[ 68.867731][ T5311] driver_register+0x23a/0x320
[ 68.869814][ T5311] usb_gadget_register_driver_owner+0xf9/0x270
[ 68.872471][ T5311] raw_ioctl+0x149a/0x3c90
[ 68.874318][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.876525][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.878754][ T5311] ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 68.880969][ T5311] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 68.883283][ T5311] ? __pfx_raw_ioctl+0x10/0x10
[ 68.885227][ T5311] ? __seccomp_filter+0x765/0x1a40
[ 68.887323][ T5311] ? __lock_acquire+0xaac/0xd20
[ 68.889401][ T5311] ? __fget_files+0x2a/0x420
[ 68.891482][ T5311] ? __fget_files+0x3a0/0x420
[ 68.893549][ T5311] ? __fget_files+0x2a/0x420
[ 68.895601][ T5311] ? bpf_lsm_file_ioctl+0x9/0x20
[ 68.897611][ T5311] ? __pfx_raw_ioctl+0x10/0x10
[ 68.899549][ T5311] __se_sys_ioctl+0xf9/0x170
[ 68.901514][ T5311] do_syscall_64+0xf6/0x210
[ 68.903326][ T5311] ? clear_bhb_loop+0x45/0xa0
[ 68.905220][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.907565][ T5311] RIP: 0033:0x7f998f18e56b
[ 68.909383][ T5311] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 68.917310][ T5311] RSP: 002b:00007f99900c0f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 68.920830][ T5311] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f998f18e56b
[ 68.924318][ T5311] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[ 68.927739][ T5311] RBP: 00007f99900c1fe0 R08: 0000000000000000 R09: 00302e6364755f79
[ 68.931103][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.934502][ T5311] R13: 00007f99900c0fb0 R14: 0000200000000bc0 R15: 00007f998f4e0b88
[ 68.937845][ T5311]
[ 68.939191][ T5311] Modules linked in:
[ 68.940859][ T5311] ---[ end trace 0000000000000000 ]---
[ 68.943306][ T5311] RIP: 0010:kasan_byte_accessible+0x12/0x30
[ 68.945834][ T5311] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[ 68.953901][ T5311] RSP: 0018:ffffc9000d2f7840 EFLAGS: 00010002
[ 68.956513][ T5311] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: b7909dca0be20d00
[ 68.959849][ T5311] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004
[ 68.963285][ T5311] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000
[ 68.966786][ T5311] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000
[ 68.970256][ T5311] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001
[ 68.973441][ T5311] FS: 00007f99900c36c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000
[ 68.976944][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.979535][ T5311] CR2: 00007f99900c1fe0 CR3: 0000000035464000 CR4: 0000000000352ef0
[ 68.982695][ T5311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.986076][ T5311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.989456][ T5311] Kernel panic - not syncing: Fatal exception
[ 68.992461][ T5311] Kernel Offset: disabled
[ 68.994250][ T5311] Rebooting in 86400 seconds..