program: mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') [ 92.332073][ T1384] cfg80211: failed to load regulatory.db [ 92.506308][ T4652] Bluetooth: hci0: command tx timeout [ 92.780866][ T5329] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 92.786094][ T5329] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 92.789696][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 92.809861][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.814774][ T5329] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 92.818074][ T5329] Code: df e8 0e 88 00 00 89 c5 31 ff 89 c6 e8 53 25 4f ff 85 ed 74 0a e8 0a 21 4f ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 de 52 be ff 4c 8b 6b 60 48 89 df e8 d2 87 [ 92.838568][ T5329] RSP: 0018:ffffc9000f55fad8 EFLAGS: 00010206 [ 92.841237][ T5329] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000000000002 [ 92.867050][ T5329] RDX: ffff888012bc4a80 RSI: 0000000000000000 RDI: 0000000000000060 [ 92.882466][ T5329] RBP: 0000000000000000 R08: ffffffff9057bf37 R09: 1ffffffff20af7e6 [ 92.888129][ T5329] R10: dffffc0000000000 R11: fffffbfff20af7e7 R12: ffffffff8f71d120 [ 92.895624][ T5329] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88800e7ca000 [ 92.904201][ T5329] FS: 00007fd7cae7d6c0(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000 [ 92.922481][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.926270][ T5329] CR2: 000055bacbd78168 CR3: 0000000043fd5000 CR4: 0000000000352ef0 [ 92.941962][ T5329] Call Trace: [ 92.943615][ T5329] [ 92.945033][ T5329] usbg_make_tpg+0x1f6/0x590 [ 92.947253][ T5329] ? configfs_mkdir+0x4b0/0x9e0 [ 92.949385][ T5329] ? __pfx___mutex_lock+0x10/0x10 [ 92.962752][ T5329] ? __pfx_usbg_make_tpg+0x10/0x10 [ 92.965917][ T5329] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.968246][ T5329] target_fabric_make_tpg+0xa8/0x6d0 [ 92.971055][ T5329] configfs_mkdir+0x4f6/0x9e0 [ 92.974676][ T5329] ? d_splice_alias+0x12/0x30 [ 92.978689][ T5329] ? __pfx_configfs_mkdir+0x10/0x10 [ 92.996467][ T5329] ? generic_permission+0x2bf/0x670 [ 92.999882][ T5329] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 93.003335][ T5329] vfs_mkdir+0x406/0x620 [ 93.006092][ T5329] filename_mkdirat+0x285/0x510 [ 93.009511][ T5329] ? __pfx_filename_mkdirat+0x10/0x10 [ 93.019386][ T5329] ? do_getname+0x151/0x250 [ 93.023154][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.027037][ T5329] __se_sys_mkdir+0x34/0x150 [ 93.032532][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.039769][ T5329] do_syscall_64+0x174/0x580 [ 93.055450][ T5329] ? trace_irq_disable+0x3b/0x140 [ 93.057737][ T5329] ? clear_bhb_loop+0x40/0x90 [ 93.059947][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.062706][ T5329] RIP: 0033:0x7fd7c9f9e019 [ 93.065103][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.092868][ T5329] RSP: 002b:00007fd7cae7cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 93.098382][ T5329] RAX: ffffffffffffffda RBX: 00007fd7ca226090 RCX: 00007fd7c9f9e019 [ 93.101923][ T5329] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 93.126910][ T5329] RBP: 00007fd7ca03500c R08: 0000000000000000 R09: 0000000000000000 [ 93.132035][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.137311][ T5329] R13: 00007fd7ca226128 R14: 00007fd7ca226090 R15: 00007ffdbc766d38 [ 93.143070][ T5329] [ 93.144828][ T5329] Modules linked in: [ 93.147779][ T5329] ---[ end trace 0000000000000000 ]--- [ 93.247294][ T5329] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 93.251782][ T5329] Code: df e8 0e 88 00 00 89 c5 31 ff 89 c6 e8 53 25 4f ff 85 ed 74 0a e8 0a 21 4f ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 de 52 be ff 4c 8b 6b 60 48 89 df e8 d2 87 [ 93.268030][ T5329] RSP: 0018:ffffc9000f55fad8 EFLAGS: 00010206 [ 93.272489][ T5329] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000000000002 [ 93.276447][ T5329] RDX: ffff888012bc4a80 RSI: 0000000000000000 RDI: 0000000000000060 [ 93.280066][ T5329] RBP: 0000000000000000 R08: ffffffff9057bf37 R09: 1ffffffff20af7e6 [ 93.283456][ T5329] R10: dffffc0000000000 R11: fffffbfff20af7e7 R12: ffffffff8f71d120 [ 93.288828][ T5329] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88800e7ca000 [ 93.298136][ T5329] FS: 00007fd7cae7d6c0(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000 [ 93.304805][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.308704][ T5329] CR2: 00007fd7ca1f36b8 CR3: 0000000043fd5000 CR4: 0000000000352ef0 [ 93.314302][ T5329] Kernel panic - not syncing: Fatal exception [ 93.318296][ T5329] Kernel Offset: disabled [ 93.320605][ T5329] Rebooting in 86400 seconds..