Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
CPU: 2 UID: 0 PID: 5975 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 fs/configfs/dir.c:1246
Code: 1f fc 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 ab b2 4a ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
RSP: 0018:ffffc90006a4fb18 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90025f81000
RDX: 000000000000000c RSI: ffffffff82bef615 RDI: 0000000000000060
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88804d488000 R14: ffff88804d488000 R15: ffff88804d4880b8
FS:  0000000000000000(0000) GS:ffff888096de6000(0063) knlGS:00000000f53ecb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00007f5d01d1758c CR3: 000000002ab7d000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 usbg_make_tpg+0x261/0x620 drivers/usb/gadget/function/f_tcm.c:1686
 target_fabric_make_tpg+0xab/0x8c0 drivers/target/target_core_fabric_configfs.c:939
 configfs_mkdir+0x51e/0xb70 fs/configfs/dir.c:1360
 vfs_mkdir+0x361/0x850 fs/namei.c:5276
 filename_mkdirat+0x48b/0x5e0 fs/namei.c:5309
 __do_sys_mkdir fs/namei.c:5336 [inline]
 __se_sys_mkdir fs/namei.c:5333 [inline]
 __ia32_sys_mkdir+0x6a/0x90 fs/namei.c:5333
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:83 [inline]
 __do_fast_syscall_32+0xe7/0x970 arch/x86/entry/syscall_32.c:307
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:332
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e
RIP: 0023:0xf701efec
Code: Unable to access opcode bytes at 0xf701efc2.
RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000027
RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 00000000000001ff
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 fs/configfs/dir.c:1246
Code: 1f fc 08 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 ab b2 4a ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b
RSP: 0018:ffffc90006a4fb18 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90025f81000
RDX: 000000000000000c RSI: ffffffff82bef615 RDI: 0000000000000060
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffff88804d488000 R14: ffff88804d488000 R15: ffff88804d4880b8
FS:  0000000000000000(0000) GS:ffff888096ce6000(0063) knlGS:00000000f53ecb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f73d9a54 CR3: 000000002ab7d000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess), 3 bytes skipped:
   0:	c7 44 24 1c fe ff ff 	movl   $0xfffffffe,0x1c(%rsp)
   7:	ff
   8:	e9 a6 02 00 00       	jmp    0x2b3
   d:	e8 ab b2 4a ff       	call   0xff4ab2bd
  12:	48 8d 7d 60          	lea    0x60(%rbp),%rdi
  16:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  1d:	fc ff df
  20:	48 89 fa             	mov    %rdi,%rdx
  23:	48 c1 ea 03          	shr    $0x3,%rdx
* 27:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2b:	0f 85 1d 04 00 00    	jne    0x44e
  31:	48 bb 00 00 00 00 00 	movabs $0xdffffc0000000000,%rbx
  38:	fc ff df
  3b:	4c                   	rex.WR
  3c:	8b                   	.byte 0x8b