program:
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mount$cgroup2(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000002500)=ANY=[])
write(0xffffffffffffffff, &(0x7f0000000140)='+rdma', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgrp2/child\x00', 0x1ff)
read(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64)
write(r0, &(0x7f00000026c0)='270', 0x3)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
symlink(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
pipe2$watch_queue(0x0, 0x80)
mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000002540)='+', 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000024c0)={'pimreg0\x00', @random="afcdaa8ec09e"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/net/afs/cells\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff)
[ 102.661126][ T4645] Bluetooth: hci0: command tx timeout
[ 102.737292][ T5329] FAULT_INJECTION: forcing a failure.
[ 102.737292][ T5329] name failslab, interval 1, probability 0, space 0, times 1
[ 102.737352][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.737367][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.737375][ T5329] Call Trace:
[ 102.737766][ T5329]
[ 102.737783][ T5329] dump_stack_lvl+0xe8/0x150
[ 102.737860][ T5329] should_fail_ex+0x410/0x560
[ 102.737912][ T5329] should_failslab+0xa8/0x100
[ 102.737934][ T5329] kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[ 102.737956][ T5329] ? alloc_inode+0xb8/0x1b0
[ 102.737970][ T5329] ? alloc_inode+0xb8/0x1b0
[ 102.737990][ T5329] alloc_inode+0xb8/0x1b0
[ 102.738006][ T5329] new_inode+0x1f/0x170
[ 102.738021][ T5329] ? configfs_new_inode+0x1f/0x410
[ 102.738037][ T5329] configfs_new_inode+0x27/0x410
[ 102.738052][ T5329] configfs_create+0xb5/0x270
[ 102.738067][ T5329] configfs_attach_item+0x25f/0xd60
[ 102.738087][ T5329] configfs_attach_group+0x2a/0x370
[ 102.738107][ T5329] create_default_group+0x87/0x180
[ 102.738124][ T5329] configfs_attach_group+0x169/0x370
[ 102.738141][ T5329] create_default_group+0x87/0x180
[ 102.738156][ T5329] configfs_attach_group+0x169/0x370
[ 102.738175][ T5329] configfs_mkdir+0x6f0/0x9e0
[ 102.738196][ T5329] ? __pfx_configfs_mkdir+0x10/0x10
[ 102.738208][ T5329] ? generic_permission+0x2bf/0x670
[ 102.738231][ T5329] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 102.738272][ T5329] vfs_mkdir+0x40c/0x620
[ 102.738291][ T5329] filename_mkdirat+0x285/0x510
[ 102.738310][ T5329] ? __pfx_filename_mkdirat+0x10/0x10
[ 102.738326][ T5329] ? do_getname+0x151/0x250
[ 102.738342][ T5329] __se_sys_mkdir+0x34/0x150
[ 102.738358][ T5329] do_syscall_64+0x166/0x520
[ 102.738423][ T5329] ? trace_irq_disable+0x3b/0x140
[ 102.738438][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.738452][ T5329] ? clear_bhb_loop+0x70/0xc0
[ 102.738467][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.738479][ T5329] RIP: 0033:0x7f592af9e559
[ 102.738508][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.738519][ T5329] RSP: 002b:00007f592bd80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 102.738544][ T5329] RAX: ffffffffffffffda RBX: 00007f592b225fa0 RCX: 00007f592af9e559
[ 102.738554][ T5329] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00002000000003c0
[ 102.738562][ T5329] RBP: 00007f592b035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 102.738570][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.738577][ T5329] R13: 00007f592b226038 R14: 00007f592b225fa0 R15: 00007ffff0b18028
[ 102.738599][ T5329]
[ 102.907648][ T5329] ------------[ cut here ]------------
[ 102.907669][ T5329] kernel BUG at fs/configfs/dir.c:734!
[ 102.907745][ T5329] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 102.915141][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.918892][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.923138][ T5329] RIP: 0010:create_default_group+0x17c/0x180
[ 102.925708][ T5329] Code: 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d5 4c 89 f7 e8 6c 8b bc ff eb cb e8 65 0f 4a ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41
[ 102.933528][ T5329] RSP: 0018:ffffc9000e4a7bb0 EFLAGS: 00010287
[ 102.936089][ T5329] RAX: ffffffff827e12cb RBX: ffff8880147ec000 RCX: 0000000000100000
[ 102.939247][ T5329] RDX: ffffc9000eefa000 RSI: 000000000000cea2 RDI: 000000000000cea3
[ 102.942616][ T5329] RBP: 00000000fffffff4 R08: ffff88801478e1c3 R09: 1ffff110028f1c38
[ 102.946020][ T5329] R10: dffffc0000000000 R11: ffffed10028f1c39 R12: dffffc0000000000
[ 102.949388][ T5329] R13: 1ffff11003966d60 R14: ffff8880147ec068 R15: ffff88801cb36b00
[ 102.952738][ T5329] FS: 00007f592bd816c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 102.956542][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.959353][ T5329] CR2: 00007f88be1d1d00 CR3: 000000004453f000 CR4: 0000000000352ef0
[ 102.962672][ T5329] Call Trace:
[ 102.964097][ T5329]
[ 102.965368][ T5329] configfs_attach_group+0x169/0x370
[ 102.967659][ T5329] configfs_mkdir+0x6f0/0x9e0
[ 102.969683][ T5329] ? __pfx_configfs_mkdir+0x10/0x10
[ 102.971807][ T5329] ? generic_permission+0x2bf/0x670
[ 102.974043][ T5329] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 102.975983][ T5329] vfs_mkdir+0x40c/0x620
[ 102.977732][ T5329] filename_mkdirat+0x285/0x510
[ 102.979618][ T5329] ? __pfx_filename_mkdirat+0x10/0x10
[ 102.981695][ T5329] ? do_getname+0x151/0x250
[ 102.983524][ T5329] __se_sys_mkdir+0x34/0x150
[ 102.985359][ T5329] do_syscall_64+0x166/0x520
[ 102.987310][ T5329] ? trace_irq_disable+0x3b/0x140
[ 102.989646][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.992411][ T5329] ? clear_bhb_loop+0x70/0xc0
[ 102.994393][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.996918][ T5329] RIP: 0033:0x7f592af9e559
[ 102.998826][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.006839][ T5329] RSP: 002b:00007f592bd80fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 103.010502][ T5329] RAX: ffffffffffffffda RBX: 00007f592b225fa0 RCX: 00007f592af9e559
[ 103.013830][ T5329] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00002000000003c0
[ 103.017114][ T5329] RBP: 00007f592b035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 103.020379][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.023718][ T5329] R13: 00007f592b226038 R14: 00007f592b225fa0 R15: 00007ffff0b18028
[ 103.027155][ T5329]
[ 103.028559][ T5329] Modules linked in:
[ 103.033908][ T5329] ---[ end trace 0000000000000000 ]---
[ 103.056824][ T5329] RIP: 0010:create_default_group+0x17c/0x180
[ 103.056855][ T5329] Code: 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d5 4c 89 f7 e8 6c 8b bc ff eb cb e8 65 0f 4a ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41
[ 103.056866][ T5329] RSP: 0018:ffffc9000e4a7bb0 EFLAGS: 00010287
[ 103.056878][ T5329] RAX: ffffffff827e12cb RBX: ffff8880147ec000 RCX: 0000000000100000
[ 103.056887][ T5329] RDX: ffffc9000eefa000 RSI: 000000000000cea2 RDI: 000000000000cea3
[ 103.056896][ T5329] RBP: 00000000fffffff4 R08: ffff88801478e1c3 R09: 1ffff110028f1c38
[ 103.056904][ T5329] R10: dffffc0000000000 R11: ffffed10028f1c39 R12: dffffc0000000000
[ 103.056913][ T5329] R13: 1ffff11003966d60 R14: ffff8880147ec068 R15: ffff88801cb36b00
[ 103.056922][ T5329] FS: 00007f592bd816c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 103.056933][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 103.056942][ T5329] CR2: 0000000000000000 CR3: 000000004453f000 CR4: 0000000000352ef0
[ 103.056978][ T5329] Kernel panic - not syncing: Fatal exception
[ 103.102570][ T5329] Kernel Offset: disabled
[ 103.104560][ T5329] Rebooting in 86400 seconds..