program: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x2418, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '512', 0x20, '2 pause_writeback 100'}}]}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, @value=0x100b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000000)) write(r4, &(0x7f0000000ac0)='dummy_udc.0', 0xb) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) (async) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r1}, [@writecache={0x0, 0x2418, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '512', 0x20, '2 pause_writeback 100'}}]}) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f00000000c0)={0x0, 0x1, @value=0x100b}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r3, &(0x7f0000000200)='270', 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000000)) (async) write(r4, &(0x7f0000000ac0)='dummy_udc.0', 0xb) (async) [ 85.943169][ T4659] Bluetooth: hci0: command tx timeout [ 86.011620][ T5336] FAULT_INJECTION: forcing a failure. [ 86.011620][ T5336] name failslab, interval 1, probability 0, space 0, times 1 [ 86.011667][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.011680][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.011686][ T5336] Call Trace: [ 86.011711][ T5336] [ 86.011745][ T5336] dump_stack_lvl+0xe8/0x150 [ 86.011854][ T5336] should_fail_ex+0x410/0x560 [ 86.011932][ T5336] should_failslab+0xa8/0x100 [ 86.012013][ T5336] ? __kernfs_new_node+0xe6/0x980 [ 86.012070][ T5336] kmem_cache_alloc_noprof+0x9c/0x600 [ 86.012085][ T5336] ? __kernfs_new_node+0xe6/0x980 [ 86.012104][ T5336] __kernfs_new_node+0xe6/0x980 [ 86.012123][ T5336] ? __pfx___kernfs_new_node+0x10/0x10 [ 86.012137][ T5336] ? kernfs_root+0x1c/0x230 [ 86.012156][ T5336] ? kernfs_root+0x1c/0x230 [ 86.012169][ T5336] ? kernfs_root+0x1c/0x230 [ 86.012181][ T5336] ? kernfs_root+0x1c/0x230 [ 86.012193][ T5336] kernfs_create_dir_ns+0xf7/0x220 [ 86.012206][ T5336] internal_create_group+0x440/0x1180 [ 86.012217][ T5336] ? __pfx_dev_add_physical_location+0x10/0x10 [ 86.012239][ T5336] ? sysfs_create_groups+0xfa/0x120 [ 86.012248][ T5336] ? __pfx_internal_create_group+0x10/0x10 [ 86.012256][ T5336] ? device_add_attrs+0x5c3/0x600 [ 86.012274][ T5336] ? __pfx_device_add_attrs+0x10/0x10 [ 86.012288][ T5336] dpm_sysfs_add+0x6a/0x270 [ 86.012302][ T5336] device_add+0x4ca/0xb80 [ 86.012318][ T5336] netdev_register_kobject+0x197/0x350 [ 86.012366][ T5336] register_netdevice+0x17be/0x2280 [ 86.012396][ T5336] ? __pfx_register_netdevice+0x10/0x10 [ 86.012411][ T5336] ? __hw_addr_insert+0x1f8/0x220 [ 86.012424][ T5336] ? dev_addr_mod+0x1ba/0x350 [ 86.012440][ T5336] register_netdev+0x40/0x60 [ 86.012456][ T5336] gether_register_netdev+0x84/0x180 [ 86.012470][ T5336] ecm_bind+0x201/0xa30 [ 86.012490][ T5336] usb_add_function+0x2e1/0x9f0 [ 86.012504][ T5336] ? check_remote_wakeup_config+0x58/0x1c0 [ 86.012519][ T5336] configfs_composite_bind+0xde0/0x1410 [ 86.012542][ T5336] ? __pfx_configfs_composite_bind+0x10/0x10 [ 86.012552][ T5336] gadget_bind_driver+0x2ca/0x9e0 [ 86.012567][ T5336] ? __pfx_gadget_bind_driver+0x10/0x10 [ 86.012577][ T5336] really_probe+0x254/0xae0 [ 86.012590][ T5336] __driver_probe_device+0x1e8/0x360 [ 86.012602][ T5336] driver_probe_device+0x4f/0x240 [ 86.012617][ T5336] __driver_attach+0x339/0x600 [ 86.012634][ T5336] bus_for_each_dev+0x23b/0x2c0 [ 86.012648][ T5336] ? __pfx___driver_attach+0x10/0x10 [ 86.012664][ T5336] ? __pfx_bus_for_each_dev+0x10/0x10 [ 86.012680][ T5336] ? do_raw_spin_unlock+0x4d/0x200 [ 86.012709][ T5336] bus_add_driver+0x38f/0x6e0 [ 86.012721][ T5336] driver_register+0x23a/0x320 [ 86.012730][ T5336] usb_gadget_register_driver_owner+0xf9/0x270 [ 86.012742][ T5336] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 86.012753][ T5336] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 86.012764][ T5336] configfs_write_iter+0x337/0x430 [ 86.012776][ T5336] vfs_write+0x612/0xba0 [ 86.012793][ T5336] ? __pfx_vfs_write+0x10/0x10 [ 86.012806][ T5336] ? __fget_files+0x3a2/0x420 [ 86.012825][ T5336] ? __fget_files+0x2a/0x420 [ 86.012839][ T5336] ? fdget+0x1ac/0x250 [ 86.012856][ T5336] ksys_write+0x150/0x270 [ 86.012869][ T5336] ? __pfx_ksys_write+0x10/0x10 [ 86.012887][ T5336] do_syscall_64+0x166/0x520 [ 86.012897][ T5336] ? trace_irq_disable+0x3b/0x140 [ 86.012918][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.012929][ T5336] ? clear_bhb_loop+0x70/0xc0 [ 86.012944][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.012956][ T5336] RIP: 0033:0x7f820759f559 [ 86.012967][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.012975][ T5336] RSP: 002b:00007f82084c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.013006][ T5336] RAX: ffffffffffffffda RBX: 00007f8207825fa0 RCX: 00007f820759f559 [ 86.013019][ T5336] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000006 [ 86.013026][ T5336] RBP: 00007f8207636b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.013032][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.013038][ T5336] R13: 00007f8207826038 R14: 00007f8207825fa0 R15: 00007ffd59a33518 [ 86.013060][ T5336] [ 86.254642][ T5336] udc dummy_udc.0: failed to start g1: -12 [ 86.254662][ T5336] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 86.259196][ T5336] UDC core: g1: couldn't find an available UDC or it's busy [ 86.262112][ T5337] ------------[ cut here ]------------ [ 86.262123][ T5337] kernel BUG at net/core/dev.c:11577! [ 86.262158][ T5337] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 86.280397][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.284302][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.289018][ T5337] RIP: 0010:register_netdevice+0x2225/0x2280 [ 86.291759][ T5337] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 5e 83 78 f8 e9 16 fb ff ff e8 54 ec 05 f8 90 0f 0b e8 4c ec 05 f8 90 <0f> 0b e8 44 ec 05 f8 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 86.300064][ T5337] RSP: 0018:ffffc9000dd67580 EFLAGS: 00010293 [ 86.302817][ T5337] RAX: ffffffff89c28ab4 RBX: 1ffff92001bacec4 RCX: ffff888013be2580 [ 86.306232][ T5337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 86.309660][ T5337] RBP: ffffc9000dd67700 R08: ffffffff91279207 R09: 1ffffffff224f240 [ 86.313045][ T5337] R10: dffffc0000000000 R11: fffffbfff224f241 R12: ffff8880437b87a8 [ 86.316485][ T5337] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880437b8000 [ 86.319931][ T5337] FS: 00007f82084a96c0(0000) GS:ffff88808ae60000(0000) knlGS:0000000000000000 [ 86.323902][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.326799][ T5337] CR2: 00007f82077fa6b8 CR3: 00000000417bb000 CR4: 0000000000352ef0 [ 86.330094][ T5337] Call Trace: [ 86.331522][ T5337] [ 86.332780][ T5337] ? trace_contention_end+0x3d/0x140 [ 86.335031][ T5337] ? __mutex_lock+0x305/0x15a0 [ 86.337189][ T5337] ? kernfs_activate_one+0x22d/0x340 [ 86.339614][ T5337] ? __pfx___mutex_lock+0x10/0x10 [ 86.341886][ T5337] ? __pfx_register_netdevice+0x10/0x10 [ 86.344391][ T5337] ? __hw_addr_insert+0x1f8/0x220 [ 86.346727][ T5337] ? dev_addr_mod+0x174/0x350 [ 86.348797][ T5337] ? dev_addr_mod+0x1ba/0x350 [ 86.351246][ T5337] register_netdev+0x40/0x60 [ 86.353367][ T5337] gether_register_netdev+0x84/0x180 [ 86.355632][ T5337] ecm_bind+0x201/0xa30 [ 86.357530][ T5337] ? rcu_is_watching+0x16/0xb0 [ 86.359715][ T5337] usb_add_function+0x2e1/0x9f0 [ 86.361926][ T5337] ? check_remote_wakeup_config+0x58/0x1c0 [ 86.364481][ T5337] configfs_composite_bind+0xde0/0x1410 [ 86.366877][ T5337] ? __pfx_configfs_composite_bind+0x10/0x10 [ 86.369495][ T5337] gadget_bind_driver+0x2ca/0x9e0 [ 86.371704][ T5337] ? __pfx_gadget_bind_driver+0x10/0x10 [ 86.373991][ T5337] really_probe+0x254/0xae0 [ 86.375998][ T5337] __driver_probe_device+0x1e8/0x360 [ 86.378361][ T5337] driver_probe_device+0x4f/0x240 [ 86.380635][ T5337] __driver_attach+0x339/0x600 [ 86.382767][ T5337] bus_for_each_dev+0x23b/0x2c0 [ 86.384881][ T5337] ? __pfx___driver_attach+0x10/0x10 [ 86.387393][ T5337] ? __pfx_bus_for_each_dev+0x10/0x10 [ 86.389701][ T5337] ? do_raw_spin_unlock+0x4d/0x200 [ 86.392005][ T5337] bus_add_driver+0x38f/0x6e0 [ 86.393915][ T5337] driver_register+0x23a/0x320 [ 86.395759][ T5337] usb_gadget_register_driver_owner+0xf9/0x270 [ 86.398494][ T5337] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 86.400978][ T5337] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 86.403911][ T5337] configfs_write_iter+0x337/0x430 [ 86.406024][ T5337] vfs_write+0x612/0xba0 [ 86.407784][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 86.409915][ T5337] ? __fget_files+0x3a2/0x420 [ 86.411835][ T5337] ? __fget_files+0x2a/0x420 [ 86.413617][ T5337] ? fdget+0x1ac/0x250 [ 86.415276][ T5337] ksys_write+0x150/0x270 [ 86.417177][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 86.419415][ T5337] do_syscall_64+0x166/0x520 [ 86.421865][ T5337] ? trace_irq_disable+0x3b/0x140 [ 86.424191][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.426903][ T5337] ? clear_bhb_loop+0x70/0xc0 [ 86.429000][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.431586][ T5337] RIP: 0033:0x7f820759f559 [ 86.433596][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.442018][ T5337] RSP: 002b:00007f82084a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.445699][ T5337] RAX: ffffffffffffffda RBX: 00007f8207826090 RCX: 00007f820759f559 [ 86.449148][ T5337] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000006 [ 86.452560][ T5337] RBP: 00007f8207636b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.456104][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.459590][ T5337] R13: 00007f8207826128 R14: 00007f8207826090 R15: 00007ffd59a33518 [ 86.463200][ T5337] [ 86.464638][ T5337] Modules linked in: [ 86.468130][ T5337] ---[ end trace 0000000000000000 ]--- [ 86.495086][ T5337] RIP: 0010:register_netdevice+0x2225/0x2280 [ 86.495116][ T5337] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 5e 83 78 f8 e9 16 fb ff ff e8 54 ec 05 f8 90 0f 0b e8 4c ec 05 f8 90 <0f> 0b e8 44 ec 05 f8 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 86.495122][ T5337] RSP: 0018:ffffc9000dd67580 EFLAGS: 00010293 [ 86.495130][ T5337] RAX: ffffffff89c28ab4 RBX: 1ffff92001bacec4 RCX: ffff888013be2580 [ 86.495137][ T5337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 86.495143][ T5337] RBP: ffffc9000dd67700 R08: ffffffff91279207 R09: 1ffffffff224f240 [ 86.495150][ T5337] R10: dffffc0000000000 R11: fffffbfff224f241 R12: ffff8880437b87a8 [ 86.495157][ T5337] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880437b8000 [ 86.495164][ T5337] FS: 00007f82084a96c0(0000) GS:ffff88808ae60000(0000) knlGS:0000000000000000 [ 86.495172][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.495178][ T5337] CR2: 000055e6516de660 CR3: 00000000417bb000 CR4: 0000000000352ef0 [ 86.495239][ T5337] Kernel panic - not syncing: Fatal exception [ 86.538377][ T5337] Kernel Offset: disabled [ 86.540215][ T5337] Rebooting in 86400 seconds..