program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x2, 0x1000000}]})
write(r0, &(0x7f0000000200)='270', 0x3)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0xffffffff80000000]}, 0x0, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000ac0)='dummy_udc.0', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x2, 0x1000000}]}) (async)
write(r0, &(0x7f0000000200)='270', 0x3) (async)
rt_sigprocmask(0x1, &(0x7f0000000000)={[0xffffffff80000000]}, 0x0, 0x8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async)
write(r2, &(0x7f0000000ac0)='dummy_udc.0', 0xb) (async)
[ 103.461979][ T4650] Bluetooth: hci0: command tx timeout
[ 103.654572][ T5332] FAULT_INJECTION: forcing a failure.
[ 103.654572][ T5332] name failslab, interval 1, probability 0, space 0, times 1
[ 103.654608][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.654621][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 103.654629][ T5332] Call Trace:
[ 103.654665][ T5332]
[ 103.654680][ T5332] dump_stack_lvl+0xe8/0x150
[ 103.654796][ T5332] should_fail_ex+0x410/0x560
[ 103.654891][ T5332] should_failslab+0xa8/0x100
[ 103.654934][ T5332] __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 103.654952][ T5332] ? __lock_acquire+0x747/0x2de0
[ 103.654993][ T5332] ? __kernfs_new_node+0xa9/0x980
[ 103.655005][ T5332] ? __kernfs_new_node+0xa9/0x980
[ 103.655017][ T5332] ? gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 103.655119][ T5332] kstrdup+0x42/0x100
[ 103.655144][ T5332] __kernfs_new_node+0xa9/0x980
[ 103.655157][ T5332] ? look_up_lock_class+0x57/0x110
[ 103.655223][ T5332] ? __pfx___kernfs_new_node+0x10/0x10
[ 103.655235][ T5332] ? kernfs_root+0x1c/0x230
[ 103.655256][ T5332] ? kernfs_root+0x1c/0x230
[ 103.655272][ T5332] ? kernfs_root+0x1c/0x230
[ 103.655289][ T5332] ? kernfs_root+0x1c/0x230
[ 103.655309][ T5332] kernfs_create_dir_ns+0xf7/0x220
[ 103.655324][ T5332] sysfs_create_dir_ns+0x12f/0x2a0
[ 103.655344][ T5332] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 103.655364][ T5332] ? do_raw_spin_unlock+0x4d/0x200
[ 103.655382][ T5332] kobject_add_internal+0x622/0xcd0
[ 103.655431][ T5332] kobject_init_and_add+0x12b/0x1a0
[ 103.655451][ T5332] ? register_netdevice+0x142e/0x1eb0
[ 103.655505][ T5332] ? register_netdev+0x40/0x60
[ 103.655517][ T5332] ? gether_register_netdev+0x84/0x180
[ 103.655534][ T5332] ? ecm_bind+0x201/0xa30
[ 103.655547][ T5332] ? __pfx_kobject_init_and_add+0x10/0x10
[ 103.655562][ T5332] ? driver_probe_device+0x4f/0x240
[ 103.655615][ T5332] ? driver_register+0x23a/0x320
[ 103.655629][ T5332] ? dev_uevent_filter+0x43/0xb0
[ 103.655642][ T5332] ? kobject_uevent_env+0x2fa/0x9e0
[ 103.655655][ T5332] net_rx_queue_update_kobjects+0x247/0x780
[ 103.655704][ T5332] netdev_register_kobject+0x23e/0x350
[ 103.655724][ T5332] register_netdevice+0x142e/0x1eb0
[ 103.655748][ T5332] ? __pfx_register_netdevice+0x10/0x10
[ 103.655765][ T5332] ? __hw_addr_insert+0x1f8/0x220
[ 103.655782][ T5332] ? dev_addr_mod+0x1ba/0x350
[ 103.655796][ T5332] register_netdev+0x40/0x60
[ 103.655811][ T5332] gether_register_netdev+0x84/0x180
[ 103.655828][ T5332] ecm_bind+0x201/0xa30
[ 103.655847][ T5332] usb_add_function+0x2e1/0x9f0
[ 103.655864][ T5332] ? check_remote_wakeup_config+0x58/0x1c0
[ 103.655908][ T5332] configfs_composite_bind+0xde0/0x1410
[ 103.655934][ T5332] ? __pfx_configfs_composite_bind+0x10/0x10
[ 103.655952][ T5332] gadget_bind_driver+0x2ca/0x9e0
[ 103.655975][ T5332] ? __pfx_gadget_bind_driver+0x10/0x10
[ 103.655988][ T5332] really_probe+0x254/0xae0
[ 103.656009][ T5332] __driver_probe_device+0x1e8/0x360
[ 103.656028][ T5332] driver_probe_device+0x4f/0x240
[ 103.656048][ T5332] __driver_attach+0x339/0x600
[ 103.656067][ T5332] bus_for_each_dev+0x23b/0x2c0
[ 103.656081][ T5332] ? __pfx___driver_attach+0x10/0x10
[ 103.656097][ T5332] ? __pfx_bus_for_each_dev+0x10/0x10
[ 103.656114][ T5332] ? do_raw_spin_unlock+0x4d/0x200
[ 103.656138][ T5332] bus_add_driver+0x345/0x670
[ 103.656157][ T5332] driver_register+0x23a/0x320
[ 103.656172][ T5332] usb_gadget_register_driver_owner+0xf9/0x270
[ 103.656188][ T5332] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 103.656208][ T5332] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 103.656225][ T5332] configfs_write_iter+0x337/0x430
[ 103.656240][ T5332] vfs_write+0x612/0xba0
[ 103.656264][ T5332] ? __pfx_vfs_write+0x10/0x10
[ 103.656282][ T5332] ? __fget_files+0x3a2/0x420
[ 103.656296][ T5332] ? __fget_files+0x2a/0x420
[ 103.656314][ T5332] ? fdget+0x1ac/0x250
[ 103.656333][ T5332] ksys_write+0x150/0x270
[ 103.656352][ T5332] ? __pfx_ksys_write+0x10/0x10
[ 103.656375][ T5332] do_syscall_64+0x166/0x520
[ 103.656388][ T5332] ? trace_irq_disable+0x3b/0x140
[ 103.656401][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.656426][ T5332] ? clear_bhb_loop+0x70/0xc0
[ 103.656441][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.656453][ T5332] RIP: 0033:0x7f2aa3f9f559
[ 103.656476][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.656486][ T5332] RSP: 002b:00007f2aa4e61fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 103.656513][ T5332] RAX: ffffffffffffffda RBX: 00007f2aa4225fa0 RCX: 00007f2aa3f9f559
[ 103.656521][ T5332] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000005
[ 103.656540][ T5332] RBP: 00007f2aa4036b20 R08: 0000000000000000 R09: 0000000000000000
[ 103.656547][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.656554][ T5332] R13: 00007f2aa4226038 R14: 00007f2aa4225fa0 R15: 00007ffd7146d528
[ 103.656571][ T5332]
[ 103.692431][ T5332] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues)
[ 103.920751][ T5338] binder: BINDER_SET_CONTEXT_MGR already set
[ 103.920761][ T5338] binder: 5331:5338 ioctl 4018620d 200000000080 returned -16
[ 103.957719][ T5332] udc dummy_udc.0: failed to start g1: -12
[ 103.957745][ T5332] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12
[ 103.978697][ T5332] UDC core: g1: couldn't find an available UDC or it's busy
[ 103.984375][ T5337] ------------[ cut here ]------------
[ 103.984387][ T5337] kernel BUG at net/core/dev.c:11443!
[ 103.984492][ T5337] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 103.995127][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 103.998974][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.003289][ T5337] RIP: 0010:register_netdevice+0x1e8f/0x1eb0
[ 104.005877][ T5337] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 f4 c4 80 f8 e9 b1 fb ff ff e8 5a 2c 0e f8 90 0f 0b e8 52 2c 0e f8 90 <0f> 0b e8 4a 2c 0e f8 90 0f 0b e8 42 2c 0e f8 41 be 42 00 00 00 e9
[ 104.014131][ T5337] RSP: 0018:ffffc9000f997580 EFLAGS: 00010293
[ 104.016701][ T5337] RAX: ffffffff89b9c91e RBX: 1ffff92001f32ec4 RCX: ffff8880378e4b00
[ 104.020121][ T5337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
[ 104.023543][ T5337] RBP: ffffc9000f997700 R08: ffffffff912588e7 R09: 1ffffffff224b11c
[ 104.026873][ T5337] R10: dffffc0000000000 R11: fffffbfff224b11d R12: ffff8880438d8f10
[ 104.029993][ T5337] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880438d8000
[ 104.033399][ T5337] FS: 00007f2aa4dde6c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000
[ 104.037269][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.040443][ T5337] CR2: 000055efea46c388 CR3: 0000000044186000 CR4: 0000000000352ef0
[ 104.043977][ T5337] Call Trace:
[ 104.045459][ T5337]
[ 104.046767][ T5337] ? trace_contention_end+0x3d/0x140
[ 104.049067][ T5337] ? __mutex_lock+0x305/0x15a0
[ 104.051178][ T5337] ? register_netdev+0x18/0x60
[ 104.053265][ T5337] ? kernfs_activate_one+0x22d/0x340
[ 104.055636][ T5337] ? __pfx___mutex_lock+0x10/0x10
[ 104.057703][ T5337] ? __pfx_register_netdevice+0x10/0x10
[ 104.060158][ T5337] ? __hw_addr_insert+0x1f8/0x220
[ 104.062401][ T5337] ? dev_addr_mod+0x174/0x350
[ 104.064469][ T5337] ? dev_addr_mod+0x1ba/0x350
[ 104.066589][ T5337] register_netdev+0x40/0x60
[ 104.068460][ T5337] gether_register_netdev+0x84/0x180
[ 104.070896][ T5337] ecm_bind+0x201/0xa30
[ 104.072720][ T5337] ? rcu_is_watching+0x16/0xb0
[ 104.074827][ T5337] usb_add_function+0x2e1/0x9f0
[ 104.077011][ T5337] ? check_remote_wakeup_config+0x58/0x1c0
[ 104.079617][ T5337] configfs_composite_bind+0xde0/0x1410
[ 104.082098][ T5337] ? __pfx_configfs_composite_bind+0x10/0x10
[ 104.084734][ T5337] gadget_bind_driver+0x2ca/0x9e0
[ 104.086965][ T5337] ? __pfx_gadget_bind_driver+0x10/0x10
[ 104.089374][ T5337] really_probe+0x254/0xae0
[ 104.091374][ T5337] __driver_probe_device+0x1e8/0x360
[ 104.093755][ T5337] driver_probe_device+0x4f/0x240
[ 104.096017][ T5337] __driver_attach+0x339/0x600
[ 104.098153][ T5337] bus_for_each_dev+0x23b/0x2c0
[ 104.100320][ T5337] ? __pfx___driver_attach+0x10/0x10
[ 104.102658][ T5337] ? __pfx_bus_for_each_dev+0x10/0x10
[ 104.104985][ T5337] ? do_raw_spin_unlock+0x4d/0x200
[ 104.107061][ T5337] bus_add_driver+0x345/0x670
[ 104.108963][ T5337] driver_register+0x23a/0x320
[ 104.110916][ T5337] usb_gadget_register_driver_owner+0xf9/0x270
[ 104.113586][ T5337] gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 104.115920][ T5337] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 104.118448][ T5337] configfs_write_iter+0x337/0x430
[ 104.120480][ T5337] vfs_write+0x612/0xba0
[ 104.122134][ T5337] ? __pfx_vfs_write+0x10/0x10
[ 104.123895][ T5337] ? __fget_files+0x3a2/0x420
[ 104.125705][ T5337] ? __fget_files+0x2a/0x420
[ 104.127473][ T5337] ? fdget+0x1ac/0x250
[ 104.129051][ T5337] ksys_write+0x150/0x270
[ 104.130677][ T5337] ? __pfx_ksys_write+0x10/0x10
[ 104.132520][ T5337] do_syscall_64+0x166/0x520
[ 104.134279][ T5337] ? trace_irq_disable+0x3b/0x140
[ 104.136482][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.138845][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 104.140870][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.143422][ T5337] RIP: 0033:0x7f2aa3f9f559
[ 104.145340][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.152362][ T5337] RSP: 002b:00007f2aa4dddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 104.155684][ T5337] RAX: ffffffffffffffda RBX: 00007f2aa4226360 RCX: 00007f2aa3f9f559
[ 104.158991][ T5337] RDX: 000000000000000b RSI: 0000200000000ac0 RDI: 0000000000000005
[ 104.162250][ T5337] RBP: 00007f2aa4036b20 R08: 0000000000000000 R09: 0000000000000000
[ 104.165285][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.168654][ T5337] R13: 00007f2aa42263f8 R14: 00007f2aa4226360 R15: 00007ffd7146d528
[ 104.172054][ T5337]
[ 104.173447][ T5337] Modules linked in:
[ 104.175730][ T5337] ---[ end trace 0000000000000000 ]---
[ 104.184444][ T5337] RIP: 0010:register_netdevice+0x1e8f/0x1eb0
[ 104.184470][ T5337] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 f4 c4 80 f8 e9 b1 fb ff ff e8 5a 2c 0e f8 90 0f 0b e8 52 2c 0e f8 90 <0f> 0b e8 4a 2c 0e f8 90 0f 0b e8 42 2c 0e f8 41 be 42 00 00 00 e9
[ 104.184480][ T5337] RSP: 0018:ffffc9000f997580 EFLAGS: 00010293
[ 104.184492][ T5337] RAX: ffffffff89b9c91e RBX: 1ffff92001f32ec4 RCX: ffff8880378e4b00
[ 104.184501][ T5337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000
[ 104.184508][ T5337] RBP: ffffc9000f997700 R08: ffffffff912588e7 R09: 1ffffffff224b11c
[ 104.184516][ T5337] R10: dffffc0000000000 R11: fffffbfff224b11d R12: ffff8880438d8f10
[ 104.184524][ T5337] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880438d8000
[ 104.184531][ T5337] FS: 00007f2aa4dde6c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000
[ 104.184541][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.184549][ T5337] CR2: 000055efea46c388 CR3: 0000000044186000 CR4: 0000000000352ef0
[ 104.184601][ T5337] Kernel panic - not syncing: Fatal exception
[ 104.226007][ T5337] Kernel Offset: disabled
[ 104.227913][ T5337] Rebooting in 86400 seconds..