program: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x51, 0xd, 0x0, 0x0, 0x0, 0x20002, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xc, 0x1944}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) flock(0xffffffffffffffff, 0x2) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd8a}}]}}, 0x0) (fail_nth: 26) [ 95.308478][ T5279] Bluetooth: hci0: command tx timeout [ 95.493811][ T5315] FAULT_INJECTION: forcing a failure. [ 95.493811][ T5315] name failslab, interval 1, probability 0, space 0, times 1 [ 95.493843][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.493855][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.493862][ T5315] Call Trace: [ 95.493876][ T5315] [ 95.493890][ T5315] dump_stack_lvl+0xe8/0x150 [ 95.493951][ T5315] should_fail_ex+0x410/0x560 [ 95.494011][ T5315] should_failslab+0xa8/0x100 [ 95.494025][ T5315] __kmalloc_cache_noprof+0xa3/0x600 [ 95.494041][ T5315] ? dummy_alloc_request+0x7f/0x130 [ 95.494083][ T5315] ? dummy_alloc_request+0x7f/0x130 [ 95.494099][ T5315] dummy_alloc_request+0x7f/0x130 [ 95.494111][ T5315] usb_ep_alloc_request+0x67/0x280 [ 95.494125][ T5315] gadget_bind+0xec/0x610 [ 95.494139][ T5315] ? kernfs_put+0x7b9/0x820 [ 95.494155][ T5315] ? __pfx_gadget_bind+0x10/0x10 [ 95.494166][ T5315] gadget_bind_driver+0x2ca/0x9e0 [ 95.494188][ T5315] ? __pfx_gadget_bind_driver+0x10/0x10 [ 95.494201][ T5315] really_probe+0x254/0xae0 [ 95.494216][ T5315] __driver_probe_device+0x1e8/0x360 [ 95.494224][ T5315] driver_probe_device+0x4f/0x240 [ 95.494232][ T5315] __driver_attach+0x339/0x600 [ 95.494240][ T5315] bus_for_each_dev+0x23b/0x2c0 [ 95.494252][ T5315] ? __pfx___driver_attach+0x10/0x10 [ 95.494262][ T5315] ? __pfx_bus_for_each_dev+0x10/0x10 [ 95.494275][ T5315] ? do_raw_spin_unlock+0x4d/0x200 [ 95.494293][ T5315] bus_add_driver+0x345/0x670 [ 95.494310][ T5315] driver_register+0x23a/0x320 [ 95.494325][ T5315] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.494341][ T5315] raw_ioctl+0x1541/0x41c0 [ 95.494356][ T5315] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.494406][ T5315] ? do_vfs_ioctl+0x116f/0x1530 [ 95.494423][ T5315] ? __pfx_raw_ioctl+0x10/0x10 [ 95.494440][ T5315] ? hook_file_ioctl+0x1f2/0x600 [ 95.494462][ T5315] ? __fget_files+0x2a/0x420 [ 95.494476][ T5315] ? __fget_files+0x2a/0x420 [ 95.494488][ T5315] ? __fget_files+0x3a2/0x420 [ 95.494499][ T5315] ? __fget_files+0x2a/0x420 [ 95.494513][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.494527][ T5315] ? __pfx_raw_ioctl+0x10/0x10 [ 95.494538][ T5315] __se_sys_ioctl+0xfc/0x170 [ 95.494554][ T5315] do_syscall_64+0x166/0x520 [ 95.494566][ T5315] ? trace_irq_disable+0x3b/0x140 [ 95.494577][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.494588][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 95.494601][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.494611][ T5315] RIP: 0033:0x7f39ffd9ddeb [ 95.494621][ T5315] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 95.494629][ T5315] RSP: 002b:00007f3a00c3aec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.494653][ T5315] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f39ffd9ddeb [ 95.494661][ T5315] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 95.494667][ T5315] RBP: 00007f3a00c3bf90 R08: 0000000000000001 R09: 00000000ffffffff [ 95.494674][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.494680][ T5315] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 95.494697][ T5315] [ 95.494717][ T5315] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 95.632577][ T5315] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 95.635400][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.639181][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.643483][ T5315] RIP: 0010:perf_trace_udc_log_req+0x30a/0x850 [ 95.646034][ T5315] Code: c6 3f 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 18 03 00 00 41 c6 06 00 48 8b 54 24 18 4c 8d 72 10 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 12 03 00 00 45 8b 26 4d 8d 77 0c 4c 89 [ 95.654073][ T5315] RSP: 0018:ffffc9000f0876a0 EFLAGS: 00010202 [ 95.656723][ T5315] RAX: 0000000000000002 RBX: ffffe8ffffc4ff00 RCX: 0000000000000065 [ 95.660255][ T5315] RDX: 0000000000000000 RSI: ffffffff8cd37c40 RDI: ffffe8ffffc4ff40 [ 95.663739][ T5315] RBP: ffffc9000f087788 R08: 0000000000000070 R09: 0000000000000030 [ 95.667252][ T5315] R10: dffffc0000000000 R11: fffff91ffff89fe9 R12: 0000000000000004 [ 95.670770][ T5315] R13: dffffc0000000000 R14: 0000000000000010 R15: ffffe8ffffc4ff00 [ 95.674273][ T5315] FS: 00007f3a00c3d6c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 95.678088][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.680933][ T5315] CR2: 00007f39ffd87780 CR3: 000000003ec4c000 CR4: 0000000000352ef0 [ 95.684339][ T5315] Call Trace: [ 95.685749][ T5315] [ 95.687066][ T5315] ? __pfx_perf_trace_udc_log_req+0x10/0x10 [ 95.689559][ T5315] ? dummy_alloc_request+0x7f/0x130 [ 95.691797][ T5315] ? dummy_alloc_request+0x7f/0x130 [ 95.694017][ T5315] ? __srcu_check_read_flavor+0x117/0x260 [ 95.696399][ T5315] usb_ep_alloc_request+0x23b/0x280 [ 95.698498][ T5315] gadget_bind+0xec/0x610 [ 95.700241][ T5315] ? kernfs_put+0x7b9/0x820 [ 95.702144][ T5315] ? __pfx_gadget_bind+0x10/0x10 [ 95.704229][ T5315] gadget_bind_driver+0x2ca/0x9e0 [ 95.706239][ T5315] ? __pfx_gadget_bind_driver+0x10/0x10 [ 95.708593][ T5315] really_probe+0x254/0xae0 [ 95.710571][ T5315] __driver_probe_device+0x1e8/0x360 [ 95.712765][ T5315] driver_probe_device+0x4f/0x240 [ 95.714811][ T5315] __driver_attach+0x339/0x600 [ 95.716702][ T5315] bus_for_each_dev+0x23b/0x2c0 [ 95.718899][ T5315] ? __pfx___driver_attach+0x10/0x10 [ 95.721322][ T5315] ? __pfx_bus_for_each_dev+0x10/0x10 [ 95.723644][ T5315] ? do_raw_spin_unlock+0x4d/0x200 [ 95.725708][ T5315] bus_add_driver+0x345/0x670 [ 95.727819][ T5315] driver_register+0x23a/0x320 [ 95.730014][ T5315] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.732818][ T5315] raw_ioctl+0x1541/0x41c0 [ 95.734952][ T5315] ? tomoyo_path_number_perm+0x219/0x5f0 [ 95.737351][ T5315] ? do_vfs_ioctl+0x116f/0x1530 [ 95.739529][ T5315] ? __pfx_raw_ioctl+0x10/0x10 [ 95.741585][ T5315] ? hook_file_ioctl+0x1f2/0x600 [ 95.743793][ T5315] ? __fget_files+0x2a/0x420 [ 95.745860][ T5315] ? __fget_files+0x2a/0x420 [ 95.747941][ T5315] ? __fget_files+0x3a2/0x420 [ 95.750022][ T5315] ? __fget_files+0x2a/0x420 [ 95.751958][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.754072][ T5315] ? __pfx_raw_ioctl+0x10/0x10 [ 95.756083][ T5315] __se_sys_ioctl+0xfc/0x170 [ 95.758073][ T5315] do_syscall_64+0x166/0x520 [ 95.760138][ T5315] ? trace_irq_disable+0x3b/0x140 [ 95.762262][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.764792][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 95.766743][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.769275][ T5315] RIP: 0033:0x7f39ffd9ddeb [ 95.771408][ T5315] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 95.781102][ T5315] RSP: 002b:00007f3a00c3aec0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.785163][ T5315] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f39ffd9ddeb [ 95.788355][ T5315] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 95.791617][ T5315] RBP: 00007f3a00c3bf90 R08: 0000000000000001 R09: 00000000ffffffff [ 95.795031][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.798333][ T5315] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 95.801774][ T5315] [ 95.803200][ T5315] Modules linked in: [ 95.805918][ T5315] ---[ end trace 0000000000000000 ]--- [ 95.808617][ T5315] RIP: 0010:perf_trace_udc_log_req+0x30a/0x850 [ 95.808639][ T5315] Code: c6 3f 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 18 03 00 00 41 c6 06 00 48 8b 54 24 18 4c 8d 72 10 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 12 03 00 00 45 8b 26 4d 8d 77 0c 4c 89 [ 95.808649][ T5315] RSP: 0018:ffffc9000f0876a0 EFLAGS: 00010202 [ 95.808660][ T5315] RAX: 0000000000000002 RBX: ffffe8ffffc4ff00 RCX: 0000000000000065 [ 95.808667][ T5315] RDX: 0000000000000000 RSI: ffffffff8cd37c40 RDI: ffffe8ffffc4ff40 [ 95.808673][ T5315] RBP: ffffc9000f087788 R08: 0000000000000070 R09: 0000000000000030 [ 95.808680][ T5315] R10: dffffc0000000000 R11: fffff91ffff89fe9 R12: 0000000000000004 [ 95.808686][ T5315] R13: dffffc0000000000 R14: 0000000000000010 R15: ffffe8ffffc4ff00 [ 95.808693][ T5315] FS: 00007f3a00c3d6c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 95.808701][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.808708][ T5315] CR2: 00007f39ffd87780 CR3: 000000003ec4c000 CR4: 0000000000352ef0 [ 95.808747][ T5315] Kernel panic - not syncing: Fatal exception [ 95.852461][ T5315] Kernel Offset: disabled [ 95.854301][ T5315] Rebooting in 86400 seconds..