program: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80015b11, &(0x7f0000000040)) r3 = eventfd2(0x9, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) dup3(r4, r3, 0x0) (async) r6 = dup3(r4, r3, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r7, 0x1, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 189.127919][ T4658] Bluetooth: hci0: command tx timeout [ 189.193048][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.202455][ T5351] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 189.205772][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 189.205787][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.205793][ T5351] Call Trace: [ 189.205800][ T5351] [ 189.205804][ T5351] dump_stack_lvl+0x189/0x250 [ 189.205916][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.205930][ T5351] ? __pfx__printk+0x10/0x10 [ 189.205940][ T5351] ? kernfs_path_from_node+0x2b/0x260 [ 189.205984][ T5351] ? kernfs_path_from_node+0x2b/0x260 [ 189.205995][ T5351] ? kernfs_path_from_node+0x2b/0x260 [ 189.206008][ T5351] ? kernfs_path_from_node+0x216/0x260 [ 189.206022][ T5351] sysfs_create_dir_ns+0x259/0x280 [ 189.206037][ T5351] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 189.206051][ T5351] ? do_raw_spin_unlock+0x4d/0x240 [ 189.206070][ T5351] kobject_add_internal+0x59f/0xb40 [ 189.206116][ T5351] kobject_init_and_add+0x125/0x190 [ 189.206132][ T5351] ? __pfx_kobject_init_and_add+0x10/0x10 [ 189.206145][ T5351] ? __kasan_kmalloc+0x93/0xb0 [ 189.206153][ T5351] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 189.206165][ T5351] ? lookup_or_create_module_kobject+0x75/0x170 [ 189.206176][ T5351] lookup_or_create_module_kobject+0xe3/0x170 [ 189.206186][ T5351] module_add_driver+0xb9/0x310 [ 189.206203][ T5351] bus_add_driver+0x391/0x640 [ 189.206219][ T5351] driver_register+0x23a/0x320 [ 189.206234][ T5351] usb_gadget_register_driver_owner+0xf9/0x270 [ 189.206251][ T5351] raw_ioctl+0x149a/0x3c90 [ 189.206268][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.206284][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.206299][ T5351] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 189.206313][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.206327][ T5351] ? __pfx_raw_ioctl+0x10/0x10 [ 189.206343][ T5351] ? count_memcg_event_mm+0x92/0x3b0 [ 189.206358][ T5351] ? __lock_acquire+0xaac/0xd20 [ 189.206382][ T5351] ? __fget_files+0x2a/0x420 [ 189.206397][ T5351] ? __fget_files+0x3a0/0x420 [ 189.206407][ T5351] ? __fget_files+0x2a/0x420 [ 189.206421][ T5351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.206434][ T5351] ? __pfx_raw_ioctl+0x10/0x10 [ 189.206446][ T5351] __se_sys_ioctl+0xf9/0x170 [ 189.206458][ T5351] do_syscall_64+0xf6/0x210 [ 189.206470][ T5351] ? clear_bhb_loop+0x45/0xa0 [ 189.206482][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.206491][ T5351] RIP: 0033:0x7faaf758e56b [ 189.206501][ T5351] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 189.206509][ T5351] RSP: 002b:00007faaf8480f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.206520][ T5351] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faaf758e56b [ 189.206527][ T5351] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 189.206533][ T5351] RBP: 00007faaf8481fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 189.206540][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.206545][ T5351] R13: 00007faaf8480fb0 R14: 00002000000000c0 R15: 00007faaf78e0320 [ 189.206562][ T5351] [ 189.206581][ T5351] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 189.359961][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.363306][ T5351] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 189.368405][ T5351] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 189.371979][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 189.376719][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.381283][ T5351] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 189.383899][ T5351] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 189.392357][ T5351] RSP: 0018:ffffc9000d5b7840 EFLAGS: 00010002 [ 189.394994][ T5351] RAX: dffffc0000000000 RBX: ffffffff8b588807 RCX: e0b3c9816065ac00 [ 189.398305][ T5351] RDX: 0000000000000000 RSI: ffffffff8b588807 RDI: 0000000000000004 [ 189.401336][ T5351] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 189.404025][ T5351] R10: dffffc0000000000 R11: fffffbfff1efda2f R12: 0000000000000000 [ 189.406983][ T5351] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 189.410123][ T5351] FS: 00007faaf84836c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 189.413592][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.416458][ T5351] CR2: 00007faaf84a2fe0 CR3: 0000000011eeb000 CR4: 0000000000352ef0 [ 189.419639][ T5351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.422844][ T5351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.426251][ T5351] Call Trace: [ 189.427676][ T5351] [ 189.429009][ T5351] __kasan_check_byte+0x12/0x40 [ 189.430997][ T5351] lock_acquire+0x8d/0x360 [ 189.432912][ T5351] ? kobj_kset_leave+0x163/0x190 [ 189.434967][ T5351] _raw_spin_lock_irqsave+0xa7/0xf0 [ 189.437100][ T5351] ? complete+0x28/0x1b0 [ 189.439068][ T5351] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 189.441591][ T5351] ? kobject_init_and_add+0x125/0x190 [ 189.443799][ T5351] complete+0x28/0x1b0 [ 189.445576][ T5351] kobject_put+0x228/0x480 [ 189.447449][ T5351] lookup_or_create_module_kobject+0x150/0x170 [ 189.450040][ T5351] module_add_driver+0xb9/0x310 [ 189.452060][ T5351] bus_add_driver+0x391/0x640 [ 189.454139][ T5351] driver_register+0x23a/0x320 [ 189.456303][ T5351] usb_gadget_register_driver_owner+0xf9/0x270 [ 189.458872][ T5351] raw_ioctl+0x149a/0x3c90 [ 189.460612][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.462976][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.464970][ T5351] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 189.467383][ T5351] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.469745][ T5351] ? __pfx_raw_ioctl+0x10/0x10 [ 189.471677][ T5351] ? count_memcg_event_mm+0x92/0x3b0 [ 189.473841][ T5351] ? __lock_acquire+0xaac/0xd20 [ 189.476002][ T5351] ? __fget_files+0x2a/0x420 [ 189.478086][ T5351] ? __fget_files+0x3a0/0x420 [ 189.480165][ T5351] ? __fget_files+0x2a/0x420 [ 189.482131][ T5351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.484265][ T5351] ? __pfx_raw_ioctl+0x10/0x10 [ 189.486219][ T5351] __se_sys_ioctl+0xf9/0x170 [ 189.488113][ T5351] do_syscall_64+0xf6/0x210 [ 189.490044][ T5351] ? clear_bhb_loop+0x45/0xa0 [ 189.492079][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.494561][ T5351] RIP: 0033:0x7faaf758e56b [ 189.496469][ T5351] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 189.504705][ T5351] RSP: 002b:00007faaf8480f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.508155][ T5351] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007faaf758e56b [ 189.511470][ T5351] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 189.514874][ T5351] RBP: 00007faaf8481fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 189.518509][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.522021][ T5351] R13: 00007faaf8480fb0 R14: 00002000000000c0 R15: 00007faaf78e0320 [ 189.525530][ T5351] [ 189.526785][ T5351] Modules linked in: [ 189.528257][ T5351] ---[ end trace 0000000000000000 ]--- [ 189.530415][ T5351] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 189.532632][ T5351] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 189.540444][ T5351] RSP: 0018:ffffc9000d5b7840 EFLAGS: 00010002 [ 189.542918][ T5351] RAX: dffffc0000000000 RBX: ffffffff8b588807 RCX: e0b3c9816065ac00 [ 189.546131][ T5351] RDX: 0000000000000000 RSI: ffffffff8b588807 RDI: 0000000000000004 [ 189.549510][ T5351] RBP: ffffffff819b49d8 R08: 0000000000000001 R09: 0000000000000000 [ 189.552839][ T5351] R10: dffffc0000000000 R11: fffffbfff1efda2f R12: 0000000000000000 [ 189.556362][ T5351] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 189.559861][ T5351] FS: 00007faaf84836c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 189.563823][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.567455][ T5351] CR2: 00007faaf84a2fe0 CR3: 0000000011eeb000 CR4: 0000000000352ef0 [ 189.570963][ T5351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.574419][ T5351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.577790][ T5351] Kernel panic - not syncing: Fatal exception [ 189.580815][ T5351] Kernel Offset: disabled [ 189.582753][ T5351] Rebooting in 86400 seconds..