program: syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020080082505a1a4400001020301090247000101000000090400000302060000052406000005240000000d240f0101000080ff0f0000000c241b08000700060608003e0905820200000000000905030308"], 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020080082505a1a4400001020301090247000101000000090400000302060000052406000005240000000d240f0101000080ff0f0000000c241b08000700060608003e0905820200000000000905030308"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000a00)=@urb_type_interrupt={0x1, {0x3}, 0x1, 0x5, 0x0, 0x0, 0x1, 0x2, 0x0, 0x6, 0xa8a, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000040)) (async) setrlimit(0x1, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100, 0x1ff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0}) fallocate(r1, 0x10, 0x2, 0x7fff) (async) fallocate(r1, 0x10, 0x2, 0x7fff) [ 69.543177][ T4660] Bluetooth: hci0: command tx timeout [ 69.621223][ T5312] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 69.630029][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 69.630046][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.630052][ T5312] Call Trace: [ 69.630057][ T5312] [ 69.630062][ T5312] dump_stack_lvl+0x189/0x250 [ 69.630172][ T5312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.630209][ T5312] ? __pfx__printk+0x10/0x10 [ 69.630220][ T5312] ? kernfs_path_from_node+0x2b/0x260 [ 69.630260][ T5312] ? kernfs_path_from_node+0x2b/0x260 [ 69.630268][ T5312] ? kernfs_path_from_node+0x2b/0x260 [ 69.630278][ T5312] ? kernfs_path_from_node+0x216/0x260 [ 69.630292][ T5312] sysfs_create_dir_ns+0x259/0x280 [ 69.630306][ T5312] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 69.630320][ T5312] ? do_raw_spin_unlock+0x4d/0x240 [ 69.630335][ T5312] kobject_add_internal+0x59f/0xb40 [ 69.630382][ T5312] kobject_init_and_add+0x125/0x190 [ 69.630398][ T5312] ? __pfx_kobject_init_and_add+0x10/0x10 [ 69.630411][ T5312] ? __kasan_kmalloc+0x93/0xb0 [ 69.630420][ T5312] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 69.630429][ T5312] ? lookup_or_create_module_kobject+0x75/0x170 [ 69.630437][ T5312] lookup_or_create_module_kobject+0xe3/0x170 [ 69.630444][ T5312] module_add_driver+0xb9/0x310 [ 69.630454][ T5312] bus_add_driver+0x391/0x640 [ 69.630464][ T5312] driver_register+0x23a/0x320 [ 69.630473][ T5312] usb_gadget_register_driver_owner+0xf9/0x270 [ 69.630486][ T5312] raw_ioctl+0x149a/0x3c90 [ 69.630496][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.630508][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.630518][ T5312] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 69.630529][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.630544][ T5312] ? __pfx_raw_ioctl+0x10/0x10 [ 69.630559][ T5312] ? count_memcg_event_mm+0x92/0x3b0 [ 69.630575][ T5312] ? __lock_acquire+0xaac/0xd20 [ 69.630599][ T5312] ? __fget_files+0x2a/0x420 [ 69.630613][ T5312] ? __fget_files+0x3a0/0x420 [ 69.630622][ T5312] ? __fget_files+0x2a/0x420 [ 69.630635][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 69.630647][ T5312] ? __pfx_raw_ioctl+0x10/0x10 [ 69.630659][ T5312] __se_sys_ioctl+0xf9/0x170 [ 69.630671][ T5312] do_syscall_64+0xf6/0x210 [ 69.630683][ T5312] ? clear_bhb_loop+0x45/0xa0 [ 69.630694][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.630703][ T5312] RIP: 0033:0x7f9e58d8e56b [ 69.630719][ T5312] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 69.630726][ T5312] RSP: 002b:00007f9e59b33f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.630737][ T5312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9e58d8e56b [ 69.630744][ T5312] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 69.630750][ T5312] RBP: 00007f9e59b34fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 69.630756][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.630761][ T5312] R13: 00007f9e59b33fb0 R14: 0000200000000340 R15: 00007f9e590e0b88 [ 69.630778][ T5312] [ 69.630797][ T5312] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 69.786496][ T5312] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 69.791308][ T5312] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 69.794637][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 69.798847][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.803049][ T5312] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 69.805500][ T5312] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 69.813068][ T5312] RSP: 0018:ffffc9000d6a7840 EFLAGS: 00010002 [ 69.815525][ T5312] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 0e9387e2edbd8c00 [ 69.818720][ T5312] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 69.821797][ T5312] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 69.824882][ T5312] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 69.828010][ T5312] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 69.831102][ T5312] FS: 00007f9e59b366c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 69.834647][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.837350][ T5312] CR2: 00007f9e59b34fe0 CR3: 00000000422fd000 CR4: 0000000000352ef0 [ 69.840765][ T5312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.843896][ T5312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.847084][ T5312] Call Trace: [ 69.848409][ T5312] [ 69.849601][ T5312] __kasan_check_byte+0x12/0x40 [ 69.851497][ T5312] lock_acquire+0x8d/0x360 [ 69.853265][ T5312] ? kobj_kset_leave+0x163/0x190 [ 69.855379][ T5312] _raw_spin_lock_irqsave+0xa7/0xf0 [ 69.857394][ T5312] ? complete+0x28/0x1b0 [ 69.859048][ T5312] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 69.861215][ T5312] ? kobject_init_and_add+0x125/0x190 [ 69.863430][ T5312] complete+0x28/0x1b0 [ 69.865140][ T5312] kobject_put+0x228/0x480 [ 69.867071][ T5312] lookup_or_create_module_kobject+0x150/0x170 [ 69.869687][ T5312] module_add_driver+0xb9/0x310 [ 69.871759][ T5312] bus_add_driver+0x391/0x640 [ 69.874070][ T5312] driver_register+0x23a/0x320 [ 69.876422][ T5312] usb_gadget_register_driver_owner+0xf9/0x270 [ 69.878924][ T5312] raw_ioctl+0x149a/0x3c90 [ 69.880696][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.883181][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.885487][ T5312] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 69.887800][ T5312] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 69.890101][ T5312] ? __pfx_raw_ioctl+0x10/0x10 [ 69.892058][ T5312] ? count_memcg_event_mm+0x92/0x3b0 [ 69.894082][ T5312] ? __lock_acquire+0xaac/0xd20 [ 69.896031][ T5312] ? __fget_files+0x2a/0x420 [ 69.897921][ T5312] ? __fget_files+0x3a0/0x420 [ 69.899835][ T5312] ? __fget_files+0x2a/0x420 [ 69.901696][ T5312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 69.903616][ T5312] ? __pfx_raw_ioctl+0x10/0x10 [ 69.905568][ T5312] __se_sys_ioctl+0xf9/0x170 [ 69.907354][ T5312] do_syscall_64+0xf6/0x210 [ 69.909034][ T5312] ? clear_bhb_loop+0x45/0xa0 [ 69.910886][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.913234][ T5312] RIP: 0033:0x7f9e58d8e56b [ 69.915021][ T5312] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 69.922562][ T5312] RSP: 002b:00007f9e59b33f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.925929][ T5312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9e58d8e56b [ 69.929135][ T5312] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 69.932130][ T5312] RBP: 00007f9e59b34fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 69.935238][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.938412][ T5312] R13: 00007f9e59b33fb0 R14: 0000200000000340 R15: 00007f9e590e0b88 [ 69.941401][ T5312] [ 69.942554][ T5312] Modules linked in: [ 69.944075][ T5312] ---[ end trace 0000000000000000 ]--- [ 69.946226][ T5312] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 69.948906][ T5312] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 69.956493][ T5312] RSP: 0018:ffffc9000d6a7840 EFLAGS: 00010002 [ 69.958937][ T5312] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 0e9387e2edbd8c00 [ 69.962081][ T5312] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 69.965212][ T5312] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 69.968418][ T5312] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 69.971752][ T5312] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 69.975053][ T5312] FS: 00007f9e59b366c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 69.978675][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.981306][ T5312] CR2: 00007f9e59b34fe0 CR3: 00000000422fd000 CR4: 0000000000352ef0 [ 69.984516][ T5312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.987790][ T5312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.991025][ T5312] Kernel panic - not syncing: Fatal exception [ 69.993789][ T5312] Kernel Offset: disabled [ 69.995608][ T5312] Rebooting in 86400 seconds..