program: mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) (async, rerun: 64) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) (async, rerun: 64) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (async) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) (async) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close(r1) (async) fchmodat(r1, &(0x7f0000000040)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x10) (async, rerun: 64) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) (rerun: 64) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) [ 92.644228][ T46] Bluetooth: hci0: command tx timeout [ 92.661682][ T807] cfg80211: failed to load regulatory.db [ 92.795138][ T5323] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 92.799918][ T5323] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 92.803289][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.806837][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.811281][ T5323] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 92.814427][ T5323] Code: df e8 ae 89 00 00 89 c5 31 ff 89 c6 e8 03 57 4b ff 85 ed 74 0a e8 fa 51 4b ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 4e f0 bc ff 4c 8b 6b 60 48 89 df e8 72 89 [ 92.822898][ T5323] RSP: 0018:ffffc9000f5cfad8 EFLAGS: 00010206 [ 92.825735][ T5323] RAX: 000000000000000c RBX: 0000000000000000 RCX: ffff88801f4ccb00 [ 92.829173][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000060 [ 92.832924][ T5323] RBP: 0000000000000000 R08: ffffffff907a427f R09: 1ffffffff20f484f [ 92.836600][ T5323] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffffffff8f93aa40 [ 92.839904][ T5323] R13: 1ffff92001eb9f6c R14: dffffc0000000000 R15: ffff88803f89f800 [ 92.843388][ T5323] FS: 00007fac85bfb6c0(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 92.847265][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.850052][ T5323] CR2: 00007fac85bfafe8 CR3: 000000001262c000 CR4: 0000000000352ef0 [ 92.853461][ T5323] Call Trace: [ 92.854992][ T5323] [ 92.856311][ T5323] usbg_make_tpg+0x1e0/0x550 [ 92.858356][ T5323] ? configfs_mkdir+0x4b0/0x9e0 [ 92.860425][ T5323] ? __pfx___mutex_lock+0x10/0x10 [ 92.862556][ T5323] ? __pfx_usbg_make_tpg+0x10/0x10 [ 92.864816][ T5323] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.867074][ T5323] target_fabric_make_tpg+0xa8/0x6d0 [ 92.869426][ T5323] configfs_mkdir+0x4f6/0x9e0 [ 92.871462][ T5323] ? d_splice_alias+0x12/0x30 [ 92.873619][ T5323] ? __pfx_configfs_mkdir+0x10/0x10 [ 92.875895][ T5323] ? generic_permission+0x2bf/0x670 [ 92.878283][ T5323] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 92.880517][ T5323] vfs_mkdir+0x40c/0x620 [ 92.882400][ T5323] filename_mkdirat+0x285/0x510 [ 92.884547][ T5323] ? __pfx_filename_mkdirat+0x10/0x10 [ 92.886930][ T5323] ? do_getname+0x151/0x250 [ 92.888935][ T5323] __se_sys_mkdir+0x34/0x150 [ 92.890971][ T5323] do_syscall_64+0x166/0x520 [ 92.893007][ T5323] ? trace_irq_disable+0x3b/0x140 [ 92.895331][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.898462][ T5323] ? clear_bhb_loop+0x70/0xc0 [ 92.900532][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.903068][ T5323] RIP: 0033:0x7fac84d9e159 [ 92.905005][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.913267][ T5323] RSP: 002b:00007fac85bfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 92.916986][ T5323] RAX: ffffffffffffffda RBX: 00007fac85026450 RCX: 00007fac84d9e159 [ 92.920358][ T5323] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 92.923669][ T5323] RBP: 00007fac84e35024 R08: 0000000000000000 R09: 0000000000000000 [ 92.927074][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.930393][ T5323] R13: 00007fac850264e8 R14: 00007fac85026450 R15: 00007ffead3f5988 [ 92.933961][ T5323] [ 92.935400][ T5323] Modules linked in: [ 92.937619][ T5323] ---[ end trace 0000000000000000 ]--- [ 92.948117][ T5323] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 92.951563][ T5323] Code: df e8 ae 89 00 00 89 c5 31 ff 89 c6 e8 03 57 4b ff 85 ed 74 0a e8 fa 51 4b ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 4e f0 bc ff 4c 8b 6b 60 48 89 df e8 72 89 [ 92.960919][ T5323] RSP: 0018:ffffc9000f5cfad8 EFLAGS: 00010206 [ 92.964388][ T5323] RAX: 000000000000000c RBX: 0000000000000000 RCX: ffff88801f4ccb00 [ 92.968316][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000060 [ 92.972070][ T5323] RBP: 0000000000000000 R08: ffffffff907a427f R09: 1ffffffff20f484f [ 92.975624][ T5323] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffffffff8f93aa40 [ 92.979327][ T5323] R13: 1ffff92001eb9f6c R14: dffffc0000000000 R15: ffff88803f89f800 [ 92.982972][ T5323] FS: 00007fac85bfb6c0(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 92.986945][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.989930][ T5323] CR2: 00007fac85bfafe8 CR3: 000000001262c000 CR4: 0000000000352ef0 [ 92.993634][ T5323] Kernel panic - not syncing: Fatal exception [ 92.996623][ T5323] Kernel Offset: disabled [ 92.998474][ T5323] Rebooting in 86400 seconds..