program: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a0905810300ee"], 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x101) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0xcf, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x310, 0x3, 0x6, 0x9, 0x10, 0x4}, 0x13, &(0x7f00000007c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2d, 0xfb, 0x84, 0x200, 0x4}]}, 0x3, [{0x14, &(0x7f0000000800)=@string={0x14, 0x3, "73d5bb97dede3d4c0ade5c5a3b22436b2ead"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x807}}, {0x49, &(0x7f0000000880)=ANY=[@ANYBLOB="4903ac8a8969c039a16d277e44fde1111521c6fe745f88523c8159c51acbfdbd608773a55b23f682aa1d3cef90b130b88048571ca1d389afa166290643366390b90acbaa0634dcee89"]}]}) (async, rerun: 64) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r4, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="910fc244a0ac"}, {&(0x7f0000000100)="f33c4234a84fd6530792324b397691f0e616994949591472180b6b5d1667db"}, {&(0x7f0000000140)="74512ccadd83b7fd9d197f466ec47a963e7db9e9f0a7c82e376b317254f55b2c5d6bbc9929c4e4c18e25c31c6846d81ce81946b2274c352fd623e93562d48ea1f821f505e8a21e64570b7e0508728c811349f0df875f2a27ca628b4779b34adc354e4d82195ce3b78f52b70cb017bd37bd1b05325e5f5aab9fbc4b64f647ef584edeb5fd54218e7b202b"}, {&(0x7f0000000200)="108f5a8345b275e17eb4601640bb8d1a2f77acf988455c5c254cd02150dd35bc21ae1c9e3d491c43111d5c5657fe8057abab2298c285f314cfe9d128c03a603ed1eac1cc328afae194"}, {&(0x7f0000000300)="c0ffd27848f92e63c241f938e90b37f2da3fca5ce00a719bf0a006f2b9f10a0bfe5c6c5489046d9d7226fad385f5d2231904c1292079d1f4d4d3c88069de6e8fe2ff3777ee1dd5514bbab01c864205ec"}, {&(0x7f0000000440)="2202b446b5b6dfdbdae6899b9b6aaf6c5f5ea9aabd1ef9d7fcc46905491b5a639fbd50b3cb88ed882b72b884e5b8b07aa66294e44256389e74a301acbaf0b40774fddb0c3846c99f4c7a841f65fd5486c06c87e8c10b076cd2939f61b74d4605e98d329e4378f4aec20295711d3bed996d8c0b6dafa646f370bc4b6f096a9bfefc2808585e31e7112d517b848a1ce702f00a1f751e9503036f36d4e295085cf379290dbf17909d5e7e1434730b9a4c9b5e59a1a1adacf0933e023efd697a3f185f15e3c0192837ca8353c3d91a089cfcade4eab1769a786ded431239d89611b97b2abc12f1496edb815f"}, {&(0x7f0000000280)="9ec2c996d4f20a8f"}, {&(0x7f0000000540)="efce323eb542fcc5f342fd6fb4bc15c0422c4986a599d4570a163ef77a5d06b52ee279bbe7d5e0415c467442f407770e4a15cfd5625f8235d3bc48c405f752ca0ce270569e65fe1e3e21f8d361fb4028463cd23817ec6309fdd0293878f5dff364303c1244281abccc99886f0208be2eb907c27585a082a9d9772e2bc0397ddd51e066ed7c9c41f50bfa0e1fb6a085ce529be416d195b114b247053da6abb4016d11080bd741289719ae42dd9023c862"}], 0x0, &(0x7f0000000680)=[@op={0x0, 0x117, 0x3, 0x1}, @iv={0x0, 0x117, 0x2, 0x0, "5b9ecc8ef2800c90559f662496abedb324e75f21d112f262553e25075a48d6c2dd485e8494efcf23e42af73d591d5c0088eebfb7bb7f0ba06891d7166965274d54d5763d83aa6a31b2bd43fe019a8095be3d195f1b45bf6182ffb515750dec716031f5b64eaa4d643b60e56331371588d9e71a64f86e20ec84b9434135cb60b411b5"}], 0x0, 0x40001}], 0x455, 0x0) [ 68.642940][ T4658] Bluetooth: hci0: command tx timeout [ 68.716127][ T5319] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 68.729215][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 68.729231][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.729237][ T5319] Call Trace: [ 68.729242][ T5319] [ 68.729247][ T5319] dump_stack_lvl+0x189/0x250 [ 68.729353][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.729364][ T5319] ? __pfx__printk+0x10/0x10 [ 68.729372][ T5319] ? kernfs_path_from_node+0x2b/0x260 [ 68.729406][ T5319] ? kernfs_path_from_node+0x2b/0x260 [ 68.729413][ T5319] ? kernfs_path_from_node+0x2b/0x260 [ 68.729422][ T5319] ? kernfs_path_from_node+0x216/0x260 [ 68.729431][ T5319] sysfs_create_dir_ns+0x259/0x280 [ 68.729444][ T5319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.729457][ T5319] ? do_raw_spin_unlock+0x4d/0x240 [ 68.729470][ T5319] kobject_add_internal+0x59f/0xb40 [ 68.729516][ T5319] kobject_init_and_add+0x125/0x190 [ 68.729532][ T5319] ? __pfx_kobject_init_and_add+0x10/0x10 [ 68.729543][ T5319] ? __kasan_kmalloc+0x93/0xb0 [ 68.729552][ T5319] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 68.729560][ T5319] ? lookup_or_create_module_kobject+0x75/0x170 [ 68.729568][ T5319] lookup_or_create_module_kobject+0xe3/0x170 [ 68.729577][ T5319] module_add_driver+0xb9/0x310 [ 68.729588][ T5319] bus_add_driver+0x391/0x640 [ 68.729597][ T5319] driver_register+0x23a/0x320 [ 68.729610][ T5319] usb_gadget_register_driver_owner+0xf9/0x270 [ 68.729626][ T5319] raw_ioctl+0x149a/0x3c90 [ 68.729642][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.729657][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.729671][ T5319] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 68.729684][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.729699][ T5319] ? __pfx_raw_ioctl+0x10/0x10 [ 68.729715][ T5319] ? count_memcg_event_mm+0x92/0x3b0 [ 68.729730][ T5319] ? __lock_acquire+0xaac/0xd20 [ 68.729753][ T5319] ? __fget_files+0x2a/0x420 [ 68.729767][ T5319] ? __fget_files+0x3a0/0x420 [ 68.729777][ T5319] ? __fget_files+0x2a/0x420 [ 68.729791][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 68.729804][ T5319] ? __pfx_raw_ioctl+0x10/0x10 [ 68.729815][ T5319] __se_sys_ioctl+0xf9/0x170 [ 68.729832][ T5319] do_syscall_64+0xf6/0x210 [ 68.729845][ T5319] ? clear_bhb_loop+0x45/0xa0 [ 68.729857][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.729867][ T5319] RIP: 0033:0x7f0f1f98e56b [ 68.729877][ T5319] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 68.729886][ T5319] RSP: 002b:00007f0f207aff10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.729898][ T5319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f1f98e56b [ 68.729904][ T5319] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000000 [ 68.729911][ T5319] RBP: 00007f0f207b0fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 68.729917][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.729922][ T5319] R13: 00007f0f207affb0 R14: 0000200000000740 R15: 00007f0f1fce0b88 [ 68.729937][ T5319] [ 68.729956][ T5319] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 68.886828][ T5319] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 68.892560][ T5319] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 68.896823][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 68.901877][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.906343][ T5319] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 68.908857][ T5319] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 68.917744][ T5319] RSP: 0018:ffffc9000d417840 EFLAGS: 00010002 [ 68.920244][ T5319] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 5f9c2a89ade38b00 [ 68.923242][ T5319] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 68.926343][ T5319] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 68.929450][ T5319] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 68.932516][ T5319] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 68.935639][ T5319] FS: 00007f0f207b26c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 68.939535][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.942030][ T5319] CR2: 00007f0f207b0fe0 CR3: 0000000041eeb000 CR4: 0000000000352ef0 [ 68.945248][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.948414][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.951872][ T5319] Call Trace: [ 68.953393][ T5319] [ 68.954683][ T5319] __kasan_check_byte+0x12/0x40 [ 68.956500][ T5319] lock_acquire+0x8d/0x360 [ 68.958233][ T5319] ? kobj_kset_leave+0x163/0x190 [ 68.960401][ T5319] _raw_spin_lock_irqsave+0xa7/0xf0 [ 68.962836][ T5319] ? complete+0x28/0x1b0 [ 68.964756][ T5319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 68.967403][ T5319] ? kobject_init_and_add+0x125/0x190 [ 68.969801][ T5319] complete+0x28/0x1b0 [ 68.971543][ T5319] kobject_put+0x228/0x480 [ 68.973420][ T5319] lookup_or_create_module_kobject+0x150/0x170 [ 68.976077][ T5319] module_add_driver+0xb9/0x310 [ 68.978096][ T5319] bus_add_driver+0x391/0x640 [ 68.980251][ T5319] driver_register+0x23a/0x320 [ 68.982372][ T5319] usb_gadget_register_driver_owner+0xf9/0x270 [ 68.985010][ T5319] raw_ioctl+0x149a/0x3c90 [ 68.986896][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.989233][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.991670][ T5319] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 68.993996][ T5319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 68.996237][ T5319] ? __pfx_raw_ioctl+0x10/0x10 [ 68.998092][ T5319] ? count_memcg_event_mm+0x92/0x3b0 [ 69.000195][ T5319] ? __lock_acquire+0xaac/0xd20 [ 69.002141][ T5319] ? __fget_files+0x2a/0x420 [ 69.004040][ T5319] ? __fget_files+0x3a0/0x420 [ 69.005951][ T5319] ? __fget_files+0x2a/0x420 [ 69.007945][ T5319] ? bpf_lsm_file_ioctl+0x9/0x20 [ 69.010067][ T5319] ? __pfx_raw_ioctl+0x10/0x10 [ 69.011947][ T5319] __se_sys_ioctl+0xf9/0x170 [ 69.013877][ T5319] do_syscall_64+0xf6/0x210 [ 69.015813][ T5319] ? clear_bhb_loop+0x45/0xa0 [ 69.017816][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.020443][ T5319] RIP: 0033:0x7f0f1f98e56b [ 69.022473][ T5319] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 69.030549][ T5319] RSP: 002b:00007f0f207aff10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.034158][ T5319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f1f98e56b [ 69.037523][ T5319] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000000 [ 69.040710][ T5319] RBP: 00007f0f207b0fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 69.043845][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.047179][ T5319] R13: 00007f0f207affb0 R14: 0000200000000740 R15: 00007f0f1fce0b88 [ 69.050478][ T5319] [ 69.051868][ T5319] Modules linked in: [ 69.053594][ T5319] ---[ end trace 0000000000000000 ]--- [ 69.056132][ T5319] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 69.058673][ T5319] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 69.066863][ T5319] RSP: 0018:ffffc9000d417840 EFLAGS: 00010002 [ 69.069490][ T5319] RAX: dffffc0000000000 RBX: ffffffff8b58a807 RCX: 5f9c2a89ade38b00 [ 69.072973][ T5319] RDX: 0000000000000000 RSI: ffffffff8b58a807 RDI: 0000000000000004 [ 69.076219][ T5319] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 69.079446][ T5319] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 69.082807][ T5319] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 69.086173][ T5319] FS: 00007f0f207b26c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 69.089928][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.092841][ T5319] CR2: 00007f0f207b0fe0 CR3: 0000000041eeb000 CR4: 0000000000352ef0 [ 69.096242][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.099540][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.102940][ T5319] Kernel panic - not syncing: Fatal exception [ 69.105817][ T5319] Kernel Offset: disabled [ 69.107704][ T5319] Rebooting in 86400 seconds..