last executing test programs:

1m34.792420878s ago: executing program 32 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)

1m14.717662744s ago: executing program 2 (id=84):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./debug/kvm\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000600), 0x1000)
r2 = openat(r1, &(0x7f0000000643), 0x0, 0x0)
openat(r2, &(0x7f0000000700)='mmu_shadow_zapped\x00', 0x0, 0x0)

1m14.7034021s ago: executing program 0 (id=85):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='0\x00', 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x41)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)

1m14.607859838s ago: executing program 2 (id=87):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='0\x00', 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x41)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)
write(r1, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r4, &(0x7f0000004000), 0x2000)

1m14.541256152s ago: executing program 0 (id=90):
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)

1m14.45109614s ago: executing program 4 (id=91):
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)

1m14.445423842s ago: executing program 2 (id=93):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)

1m14.343721692s ago: executing program 2 (id=94):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x1234\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0x5678\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0)

1m14.33860292s ago: executing program 0 (id=95):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)

1m14.302589953s ago: executing program 4 (id=97):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='1\n\x00', 0x2)
close(r4)
nanosleep(&(0x7f0000000500)={0x0, 0x989680}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='0\n\x00', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f00000004c0)='\n\x00', 0x1)

1m14.243495348s ago: executing program 0 (id=98):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fae)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb3)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fb8)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)
write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fbd)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40})
read(r5, &(0x7f0000004000), 0x2000)

1m14.14439188s ago: executing program 4 (id=101):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
write(0xffffffffffffffff, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(0xffffffffffffffff)

1m14.108993188s ago: executing program 2 (id=103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='1\n\x00', 0x2)
close(r4)
nanosleep(&(0x7f0000000500)={0x0, 0x989680}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='\n\x00', 0x1)

1m14.070197427s ago: executing program 4 (id=104):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)

1m14.00623119s ago: executing program 0 (id=105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x2, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r5, 0x2)

1m13.982269111s ago: executing program 4 (id=106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='1\n\x00', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='\n\x00', 0x1)

1m13.785611553s ago: executing program 2 (id=108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

1m13.753762765s ago: executing program 4 (id=109):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)
write$P9_RMKNOD(r0, 0x0, 0x0)
shutdown(r0, 0x1)

1m13.70318726s ago: executing program 0 (id=110):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='1\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='\n\x00', 0x1)

57.918029406s ago: executing program 33 (id=110):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='1\n\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='\n\x00', 0x1)

57.628258439s ago: executing program 34 (id=108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

57.380216465s ago: executing program 35 (id=109):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)
write$P9_RMKNOD(r0, 0x0, 0x0)
shutdown(r0, 0x1)

52.335440103s ago: executing program 5 (id=114):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='namespace0.0', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='pm', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='namespace0.0', 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='pfn0.0', 0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000440)='pfn0.0', 0x6)

52.077739449s ago: executing program 6 (id=115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x0525\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0xa4a1\n\x00', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
write(r2, &(0x7f0000000230)='0x02\n\x00', 0x5)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='dummy_udc.0\n\x00', 0xc)
close(r3)
nanosleep(&(0x7f0000000440)={0x0, 0x989680}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff)
mount(&(0x7f0000000580)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f00000004c0)='\n\x00', 0x1)

51.895682665s ago: executing program 6 (id=129):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)

51.850330454s ago: executing program 5 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x1234\n', 0x7)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0)

51.761835204s ago: executing program 6 (id=131):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)

51.4801034s ago: executing program 6 (id=133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='p:kprobes/read_msr read_msr\n\x00', 0x1c)

51.478981594s ago: executing program 5 (id=134):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x2c, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xe}, {0x4, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='100', 0x3)
close(r0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000340)={0x1000})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')

51.47868247s ago: executing program 6 (id=136):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='file0\x00', 0x6)
symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb)
close(r3)

49.390076532s ago: executing program 5 (id=137):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff)
r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f00000001c0)='idVendor\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='0x1d6b\x00', 0x6)
openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0)

45.570528899s ago: executing program 6 (id=150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

45.416249797s ago: executing program 36 (id=150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

45.37852569s ago: executing program 5 (id=152):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)

45.37834944s ago: executing program 37 (id=152):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)

44.989103719s ago: executing program 1 (id=162):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='p:my_probe ./file0:0x0', 0x16)

44.887678668s ago: executing program 1 (id=163):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)

44.787455087s ago: executing program 1 (id=165):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)

44.589749349s ago: executing program 1 (id=167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x2, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r5, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

44.417568493s ago: executing program 1 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

38.10966359s ago: executing program 1 (id=172):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000a00)='rd_pages=8', 0xa)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000c00)='1', 0x1)
close(r0)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/alua/tg_pt_gps/default_tg_pt_gp/members\x00', 0x0, 0x0)

38.030423901s ago: executing program 38 (id=172):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000a00)='rd_pages=8', 0xa)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000c00)='1', 0x1)
close(r0)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/alua/tg_pt_gps/default_tg_pt_gp/members\x00', 0x0, 0x0)

26.537638005s ago: executing program 9 (id=159):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='p:kprobes/read_', 0xf)

26.016743083s ago: executing program 8 (id=221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)

25.934552916s ago: executing program 8 (id=223):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x10000009, 0x1, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

25.883006417s ago: executing program 3 (id=224):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x100000, 0x100000})

25.69536539s ago: executing program 3 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='0x0004\n\x00', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='ACME\n\x00', 0x5)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)

25.649031552s ago: executing program 3 (id=226):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x10000009, 0x1, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

25.592178299s ago: executing program 8 (id=227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='10000', 0x5)

25.480935946s ago: executing program 8 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x1234\n', 0x7)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0)

25.339289139s ago: executing program 3 (id=231):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000001100)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
ioctl(r1, 0x40140921, 0x0)

25.338380879s ago: executing program 8 (id=232):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x10000009, 0x1, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

18.073109928s ago: executing program 8 (id=234):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='md0', 0x3)
write(0xffffffffffffffff, &(0x7f0000000200)='3', 0x1)

17.922971031s ago: executing program 3 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
llistxattr(0x0, &(0x7f0000000440)=""/90, 0x5a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}})
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='100', 0x3)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x4)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
write(r3, &(0x7f0000000080), 0x0)

15.341089532s ago: executing program 7 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000200)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0525', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0xa4a1', 0x6)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)='dummy_udc.0', 0xb)
close(r2)
clock_nanosleep(0x0, 0x0, &(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000440)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000480)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000004c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000500)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000540)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000580)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f0000000640)={0x0, 0x5f5e100}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f00000006c0)='\n', 0x1)

14.707397911s ago: executing program 7 (id=239):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x2, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r5, 0x2)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13.690260755s ago: executing program 7 (id=240):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0x1234\n', 0x7)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000480)='dummy_udc.0\n', 0xc)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00', 0x0)

7.513888453s ago: executing program 7 (id=241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x2, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r5, 0x2)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.241771205s ago: executing program 7 (id=242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='10', 0x2)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b", 0xdc, 0x4040004, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x148, 0x6, 0x2, 0x0, 0x2}, 0x30, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

241.085µs ago: executing program 7 (id=243):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2/block.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3/block.0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dummy_udc.0\n\x00', 0xc)

0s ago: executing program 3 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
llistxattr(0x0, &(0x7f0000000440)=""/90, 0x5a)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}})
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='100', 0x3)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x4)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000})
write(r3, &(0x7f0000000080), 0x0)

kernel console output (not intermixed with test programs):

ailure.
[  181.354687][ T5155] name failslab, interval 1, probability 10, space 0, times 60
[  181.354684][    C3]  ? ieee80211_clean_skb+0x1a7/0x740
[  181.354713][    C3]  ieee80211_rx_list+0xf19/0x2160
[  181.354738][    C3]  ? lock_acquire+0x1b9/0x370
[  181.354763][    C3]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  181.354787][    C3]  ieee80211_rx_napi+0xdc/0x400
[  181.354805][    C3]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  181.354823][    C3]  ? lockdep_hardirqs_on+0x78/0x100
[  181.354844][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.354867][    C3]  ieee80211_handle_queued_frames+0xc8/0x120
[  181.354893][    C3]  tasklet_action_common+0x2de/0x3d0
[  181.354919][    C3]  handle_softirqs+0x1ea/0x9b0
[  181.354943][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  181.354962][    C3]  ? _raw_spin_unlock+0x28/0x50
[  181.354979][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  181.355004][    C3]  __irq_exit_rcu+0x162/0x210
[  181.355024][    C3]  irq_exit_rcu+0x9/0x30
[  181.355042][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  181.355062][    C3]  </IRQ>
[  181.355068][    C3]  <TASK>
[  181.355079][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  181.355098][    C3] RIP: 0010:console_flush_one_record+0xac3/0xe50
[  181.355121][    C3] Code: 00 e8 b1 07 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 af b4 21 00 48 85 ed 0f 85 d7 01 00 00 e8 01 ba 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
[  181.355138][    C3] RSP: 0000:ffffc90004626eb0 EFLAGS: 00000293
[  181.355153][    C3] RAX: ffffffff8f9af798 RBX: ffffffff8f9af740 RCX: ffffffff81e7f251
[  181.355165][    C3] RDX: ffff888025aa8000 RSI: ffffffff81e7f25f RDI: ffff888025aa8000
[  181.355176][    C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  181.355186][    C3] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000db09
[  181.355197][    C3] R13: ffffffff8f9af798 R14: ffffc90004626f30 R15: dffffc0000000000
[  181.355215][    C3]  ? console_flush_one_record+0xab1/0xe50
[  181.355236][    C3]  ? console_flush_one_record+0xabf/0xe50
[  181.355265][    C3]  ? __pfx_console_flush_one_record+0x10/0x10
[  181.355286][    C3]  ? __lock_acquire+0x49f/0x1a40
[  181.355311][    C3]  ? is_printk_cpu_sync_owner+0x32/0x40
[  181.355328][    C3]  console_unlock+0x103/0x260
[  181.355341][    C3]  ? __pfx_console_unlock+0x10/0x10
[  181.355355][    C3]  ? lock_acquire+0x140/0x370
[  181.355375][    C3]  vprintk_emit+0x407/0x6b0
[  181.355389][    C3]  ? __pfx_vprintk_emit+0x10/0x10
[  181.355402][    C3]  ? __wake_up_klogd+0xe2/0x140
[  181.355413][    C3]  ? vprintk_emit+0x1c9/0x6b0
[  181.355429][    C3]  _printk+0xcf/0x110
[  181.355440][    C3]  ? __pfx__printk+0x10/0x10
[  181.355452][    C3]  ? _printk+0xcf/0x110
[  181.355447][    C0] FAULT_INJECTION: forcing a failure.
[  181.355447][    C0] name failslab, interval 1, probability 10, space 0, times 60
[  181.355462][    C3]  ? __pfx__printk+0x10/0x10
[  181.355472][    C3]  ? do_raw_spin_lock+0x128/0x260
[  181.355487][    C3]  hugetlb_show_meminfo_node+0x153/0x1f0
[  181.355507][    C3]  show_free_areas+0x1c10/0x1d60
[  181.355528][    C3]  ? __pfx_show_free_areas+0x10/0x10
[  181.355549][    C3]  ? __show_mem+0x28/0x134
[  181.355564][    C3]  __show_mem+0x41/0x134
[  181.355580][    C3]  warn_alloc_show_mem+0xfb/0x10a
[  181.355599][    C3]  warn_alloc.cold+0xa2/0xa8
[  181.355610][    C3]  ? __pfx_warn_alloc+0x10/0x10
[  181.355622][    C3]  ? dump_stack_lvl+0x17c/0x190
[  181.355639][    C3]  ? rcu_is_watching+0x12/0xc0
[  181.355653][    C3]  ? __kasan_kmalloc+0x8a/0xb0
[  181.355668][    C3]  ? __kmalloc_node_noprof+0x357/0x830
[  181.355681][    C3]  ? __get_vm_area_node+0x1dc/0x330
[  181.355696][    C3]  ? __get_vm_area_node+0x208/0x330
[  181.355711][    C3]  ? __vmalloc_node_range_noprof+0x409/0x1630
[  181.355730][    C3]  __vmalloc_node_range_noprof+0x1394/0x1630
[  181.355751][    C3]  ? kernel_clone+0x176/0x9d0
[  181.355768][    C3]  ? __memcg_slab_post_alloc_hook+0x1bb/0x1160
[  181.355786][    C3]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.355806][    C3]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.355824][    C3]  ? kernel_clone+0x176/0x9d0
[  181.355837][    C3]  __vmalloc_node_noprof+0xad/0xf0
[  181.355853][    C3]  ? kernel_clone+0x176/0x9d0
[  181.355867][    C3]  copy_process+0x7fb/0x8030
[  181.355883][    C3]  ? __mod_timer+0x40e/0xca0
[  181.355896][    C3]  ? __pfx_copy_process+0x10/0x10
[  181.355909][    C3]  ? do_raw_spin_lock+0x128/0x260
[  181.355923][    C3]  ? __lock_acquire+0x49f/0x1a40
[  181.355941][    C3]  kernel_clone+0x176/0x9d0
[  181.355955][    C3]  ? __pfx_kernel_clone+0x10/0x10
[  181.355968][    C3]  ? do_raw_spin_lock+0x128/0x260
[  181.355982][    C3]  ? look_up_lock_class+0x55/0x120
[  181.355998][    C3]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.356016][    C3]  user_mode_thread+0xcc/0x110
[  181.356030][    C3]  ? __pfx_user_mode_thread+0x10/0x10
[  181.356043][    C3]  ? find_held_lock+0x2b/0x80
[  181.356059][    C3]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.356084][    C3]  ? __pfx_kernel_sigaction+0x10/0x10
[  181.356103][    C3]  call_usermodehelper_exec_work+0x6b/0x180
[  181.356121][    C3]  process_one_work+0xa23/0x1940
[  181.356142][    C3]  ? __pfx_process_one_work+0x10/0x10
[  181.356161][    C3]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[  181.356181][    C3]  worker_thread+0x5ef/0xe50
[  181.356200][    C3]  ? __pfx_worker_thread+0x10/0x10
[  181.356216][    C3]  ? kthread+0x13a/0x450
[  181.356230][    C3]  ? __pfx_worker_thread+0x10/0x10
[  181.356244][    C3]  kthread+0x370/0x450
[  181.356259][    C3]  ? __pfx_kthread+0x10/0x10
[  181.356280][    C3]  ret_from_fork+0x72b/0xd50
[  181.356303][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  181.356324][    C3]  ? __switch_to+0x800/0x10f0
[  181.356352][    C3]  ? __pfx_kthread+0x10/0x10
[  181.356376][    C3]  ret_from_fork_asm+0x1a/0x30
[  181.356410][    C3]  </TASK>
[  181.356423][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.356440][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.356444][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.356450][ T5155] Call Trace:
[  181.356455][ T5155]  <TASK>
[  181.356459][ T5155]  dump_stack_lvl+0x100/0x190
[  181.356478][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.356496][ T5155]  should_failslab+0xc2/0x120
[  181.356518][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.356543][ T5155]  ? do_getname+0x35/0x390
[  181.356591][ T5155]  do_getname+0x35/0x390
[  181.356609][ T5155]  do_sys_openat2+0xc7/0x1e0
[  181.356625][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.356640][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.356657][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.356676][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.356690][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.356710][ T5155]  do_syscall_64+0x115/0x840
[  181.356723][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.356737][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.356769][ T5155] RIP: 0033:0x7f182a2a7407
[  181.356780][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.356791][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.356802][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.356809][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.356817][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.356823][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.356830][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.356844][ T5155]  </TASK>
[  181.356853][    C0] CPU: 0 UID: 0 PID: 1356 Comm: kworker/0:2 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.356871][    C0] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.356875][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.356883][    C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
[  181.356900][    C0] Call Trace:
[  181.356904][    C0]  <IRQ>
[  181.356908][    C0]  dump_stack_lvl+0x100/0x190
[  181.356922][    C0]  should_fail_ex.cold+0x5/0xa
[  181.356934][    C0]  should_failslab+0xc2/0x120
[  181.356950][    C0]  __kmalloc_noprof+0xfc/0x820
[  181.356963][    C0]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.356982][ T5155] udevd[5155]: could not touch /run/udev/queue: Cannot allocate memory
[  181.356984][    C0]  ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.357004][    C0]  ? kasan_save_stack+0x3f/0x50
[  181.357018][    C0]  ? kasan_save_stack+0x30/0x50
[  181.357031][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[  181.357047][    C0]  ? __kmalloc_noprof+0x322/0x820
[  181.357062][    C0]  ? lock_acquire+0x1b9/0x370
[  181.357079][    C0]  ? find_held_lock+0x2b/0x80
[  181.357092][    C0]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.357106][    C0]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.357121][    C0]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  181.357142][    C0]  ? kvfree_call_rcu+0x1be/0x4f0
[  181.357156][    C0]  ? __asan_memcpy+0x3c/0x60
[  181.357168][    C0]  ieee80211_inform_bss+0x159/0x1170
[  181.357187][    C0]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.357206][    C0]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.357224][    C0]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.357240][    C0]  cfg80211_inform_single_bss_data+0x898/0x1dc0
[  181.357256][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.357275][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.357301][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.357320][    C0]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.357335][    C0]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.357351][    C0]  ? lock_acquire+0x1b9/0x370
[  181.357368][    C0]  ? find_held_lock+0x2b/0x80
[  181.357381][    C0]  ? clockevents_program_event+0x1bf/0x820
[  181.357395][    C0]  ? clockevents_program_event+0x1bf/0x820
[  181.357410][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.357428][    C0]  ? clockevents_program_event+0x1ef/0x820
[  181.357444][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[  181.357460][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.357481][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.357503][    C0]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.357522][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  181.357540][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.357558][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  181.357577][    C0]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.357592][    C0]  ieee80211_scan_rx+0x4e6/0xb60
[  181.357608][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.357626][    C0]  __ieee80211_rx_handle_packet+0xbab/0xfc0
[  181.357640][    C0]  ? __pfx___ieee80211_rx_handle_packet+0x10/0x10
[  181.357652][    C0]  ? do_raw_spin_lock+0x128/0x260
[  181.357668][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  181.357681][    C0]  ? ieee80211_clean_skb+0x1a7/0x740
[  181.357699][    C0]  ieee80211_rx_list+0xf19/0x2160
[  181.357714][    C0]  ? lock_acquire+0x1b9/0x370
[  181.357730][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  181.357745][    C0]  ieee80211_rx_napi+0xdc/0x400
[  181.357756][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  181.357767][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  181.357780][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.357794][    C0]  ieee80211_handle_queued_frames+0xc8/0x120
[  181.357811][    C0]  tasklet_action_common+0x2de/0x3d0
[  181.357827][    C0]  handle_softirqs+0x1ea/0x9b0
[  181.357840][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  181.357853][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  181.357864][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  181.357880][    C0]  ? wg_packet_decrypt_worker+0x141/0x540
[  181.357893][    C0]  do_softirq+0xac/0xe0
[  181.357904][    C0]  </IRQ>
[  181.357908][    C0]  <TASK>
[  181.357912][    C0]  __local_bh_enable_ip+0xf8/0x120
[  181.357924][    C0]  wg_packet_decrypt_worker+0x141/0x540
[  181.357939][    C0]  process_one_work+0xa23/0x1940
[  181.357960][    C0]  ? __pfx_process_one_work+0x10/0x10
[  181.357979][    C0]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  181.357993][    C0]  worker_thread+0x5ef/0xe50
[  181.358012][    C0]  ? __pfx_worker_thread+0x10/0x10
[  181.358028][    C0]  ? kthread+0x13a/0x450
[  181.358045][    C0]  ? __pfx_worker_thread+0x10/0x10
[  181.358059][    C0]  kthread+0x370/0x450
[  181.358073][    C0]  ? __pfx_kthread+0x10/0x10
[  181.358089][    C0]  ret_from_fork+0x72b/0xd50
[  181.358103][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  181.358117][    C0]  ? __switch_to+0x800/0x10f0
[  181.358134][    C0]  ? __pfx_kthread+0x10/0x10
[  181.358149][    C0]  ret_from_fork_asm+0x1a/0x30
[  181.358171][    C0]  </TASK>
[  181.360346][  T821] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.361398][ T5846] CPU: 2 UID: 0 PID: 5846 Comm: kworker/u32:4 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.361419][ T5846] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.361423][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.361431][ T5846] Workqueue: bat_events batadv_mcast_mla_update
[  181.361451][ T5846] Call Trace:
[  181.361455][ T5846]  <TASK>
[  181.361460][ T5846]  dump_stack_lvl+0x100/0x190
[  181.361474][ T5846]  should_fail_ex.cold+0x5/0xa
[  181.361486][ T5846]  should_failslab+0xc2/0x120
[  181.361502][ T5846]  __kmalloc_cache_noprof+0x91/0x6c0
[  181.361514][ T5846]  ? batadv_mcast_mla_update+0x19ae/0x3200
[  181.361535][ T5846]  batadv_mcast_mla_update+0x19ae/0x3200
[  181.361555][ T5846]  ? __pfx_batadv_mcast_mla_update+0x10/0x10
[  181.361575][ T5846]  ? debug_object_deactivate+0x2e4/0x3b0
[  181.361596][ T5846]  ? rcu_is_watching+0x12/0xc0
[  181.361612][ T5846]  process_one_work+0xa23/0x1940
[  181.361634][ T5846]  ? __pfx_process_one_work+0x10/0x10
[  181.361653][ T5846]  ? __pfx_batadv_mcast_mla_update+0x10/0x10
[  181.361671][ T5846]  worker_thread+0x5ef/0xe50
[  181.361690][ T5846]  ? __pfx_worker_thread+0x10/0x10
[  181.361706][ T5846]  ? kthread+0x13a/0x450
[  181.361719][ T5846]  ? __pfx_worker_thread+0x10/0x10
[  181.361734][ T5846]  kthread+0x370/0x450
[  181.361747][ T5846]  ? __pfx_kthread+0x10/0x10
[  181.361762][ T5846]  ret_from_fork+0x72b/0xd50
[  181.361776][ T5846]  ? __pfx_ret_from_fork+0x10/0x10
[  181.361790][ T5846]  ? __switch_to+0x800/0x10f0
[  181.361806][ T5846]  ? __pfx_kthread+0x10/0x10
[  181.361821][ T5846]  ret_from_fork_asm+0x1a/0x30
[  181.361842][ T5846]  </TASK>
[  181.362650][ T5728] FAULT_INJECTION: forcing a failure.
[  181.362650][ T5728] name failslab, interval 1, probability 10, space 0, times 55
[  181.364284][  T821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  181.366242][ T5728] CPU: 2 UID: 0 PID: 5728 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.366261][ T5728] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.366266][ T5728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.366272][ T5728] Call Trace:
[  181.366277][ T5728]  <TASK>
[  181.366281][ T5728]  dump_stack_lvl+0x100/0x190
[  181.366298][ T5728]  should_fail_ex.cold+0x5/0xa
[  181.366312][ T5728]  should_failslab+0xc2/0x120
[  181.366328][ T5728]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.366345][ T5728]  ? __alloc_skb+0x140/0x710
[  181.366362][ T5728]  __alloc_skb+0x140/0x710
[  181.366377][ T5728]  ? __pfx___alloc_skb+0x10/0x10
[  181.366392][ T5728]  ? __tcp_push_pending_frames+0xc4/0x3b0
[  181.366414][ T5728]  tcp_stream_alloc_skb+0x34/0x660
[  181.366431][ T5728]  tcp_sendmsg_locked+0x13b2/0x44d0
[  181.366451][ T5728]  ? __lock_acquire+0x49f/0x1a40
[  181.366473][ T5728]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  181.366491][ T5728]  ? do_raw_spin_lock+0x128/0x260
[  181.366504][ T5728]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  181.366520][ T5728]  ? __local_bh_enable_ip+0x9e/0x120
[  181.366538][ T5728]  tcp_sendmsg+0x2e/0x50
[  181.366553][ T5728]  ? __pfx_tcp_sendmsg+0x10/0x10
[  181.366569][ T5728]  inet_sendmsg+0xb9/0x140
[  181.366586][ T5728]  sock_write_iter+0x4ea/0x5b0
[  181.366598][ T5728]  ? __pfx_inet_sendmsg+0x10/0x10
[  181.366613][ T5728]  ? __pfx_sock_write_iter+0x10/0x10
[  181.366628][ T5728]  ? bpf_lsm_file_permission+0x9/0x10
[  181.366640][ T5728]  ? security_file_permission+0x76/0x210
[  181.366657][ T5728]  ? rw_verify_area+0xce/0x6d0
[  181.366676][ T5728]  vfs_write+0x6ac/0x1050
[  181.366687][ T5728]  ? __pfx_sock_write_iter+0x10/0x10
[  181.366699][ T5728]  ? __pfx_vfs_write+0x10/0x10
[  181.366712][ T5728]  ? get_old_timespec32+0xda/0x130
[  181.366732][ T5728]  ? common_nsleep+0xa1/0xd0
[  181.366748][ T5728]  ksys_write+0x1f8/0x250
[  181.366764][ T5728]  ? __pfx_ksys_write+0x10/0x10
[  181.366786][ T5728]  __do_fast_syscall_32+0xe7/0x970
[  181.366812][ T5728]  do_fast_syscall_32+0x32/0x70
[  181.366836][ T5728]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.366862][ T5728] RIP: 0023:0xf707efec
[  181.366879][ T5728] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  181.366894][ T5728] RSP: 002b:00000000ffc71290 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  181.366906][ T5728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000057ca4c68
[  181.366914][ T5728] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  181.366921][ T5728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.366928][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.366934][ T5728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.366949][ T5728]  </TASK>
[  181.367750][ T5155] FAULT_INJECTION: forcing a failure.
[  181.367750][ T5155] name failslab, interval 1, probability 10, space 0, times 53
[  181.369306][  T821] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  181.369324][  T821] 54360 total pagecache pages
[  181.369332][  T821] 298 pages in swap cache
[  181.369339][  T821] Free swap  = 120364kB
[  181.369347][  T821] Total swap = 124996kB
[  181.369356][  T821] 524155 pages RAM
[  181.369362][  T821] 0 pages HighMem/MovableOnly
[  181.371355][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.371382][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.371390][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.371400][ T5155] Call Trace:
[  181.371407][ T5155]  <TASK>
[  181.371415][ T5155]  dump_stack_lvl+0x100/0x190
[  181.371439][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.371460][ T5155]  should_failslab+0xc2/0x120
[  181.371485][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.371509][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.371533][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.371563][ T5155]  security_file_alloc+0x34/0x2c0
[  181.371588][ T5155]  init_file+0x95/0x480
[  181.371609][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.371633][ T5155]  path_openat+0xe7/0x4280
[  181.371651][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.371674][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.371695][ T5155]  ? do_getname+0x35/0x390
[  181.371715][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.371738][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.371758][ T5155]  ? do_syscall_64+0x115/0x840
[  181.371779][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.371805][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.371832][ T5155]  do_file_open+0x20e/0x430
[  181.371851][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.371883][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.371902][ T5155]  ? do_getname+0x191/0x390
[  181.371926][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.371950][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.371976][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.372031][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.372064][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.372087][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.372119][ T5155]  do_syscall_64+0x115/0x840
[  181.372139][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.372160][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.372178][ T5155] RIP: 0033:0x7f182a2a7407
[  181.372194][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.372211][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.372228][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.372241][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.372252][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.372262][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.372273][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.372295][ T5155]  </TASK>
[  181.372652][ T5155] udevd[5155]: could not touch /run/udev/queue: Cannot allocate memory
[  181.373442][  T821] 211525 pages reserved
[  181.376193][ T5155] FAULT_INJECTION: forcing a failure.
[  181.376193][ T5155] name failslab, interval 1, probability 10, space 0, times 52
[  181.377421][  T821] 0 pages cma reserved
[  181.380117][  T821] FAULT_INJECTION: forcing a failure.
[  181.380117][  T821] name failslab, interval 1, probability 10, space 0, times 52
[  181.381960][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.382001][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.382009][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.382019][ T5155] Call Trace:
[  181.382032][ T5155]  <TASK>
[  181.382039][ T5155]  dump_stack_lvl+0x100/0x190
[  181.382064][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.382085][ T5155]  should_failslab+0xc2/0x120
[  181.382110][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.382132][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.382155][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.382183][ T5155]  security_file_alloc+0x34/0x2c0
[  181.382207][ T5155]  init_file+0x95/0x480
[  181.382228][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.382252][ T5155]  path_openat+0xe7/0x4280
[  181.382270][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.382292][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.382312][ T5155]  ? do_getname+0x35/0x390
[  181.382331][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.382352][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.382373][ T5155]  ? do_syscall_64+0x115/0x840
[  181.382394][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.382419][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.382444][ T5155]  do_file_open+0x20e/0x430
[  181.382464][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.382499][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.382520][ T5155]  ? do_getname+0x191/0x390
[  181.382542][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.382566][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.382591][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.382618][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.382648][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.382673][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.382706][ T5155]  do_syscall_64+0x115/0x840
[  181.382727][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.382749][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.382768][ T5155] RIP: 0033:0x7f182a2a7407
[  181.382784][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.382801][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.382819][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.382831][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.382842][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.382853][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.382864][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.382888][ T5155]  </TASK>
[  181.382950][  T109] FAULT_INJECTION: forcing a failure.
[  181.382950][  T109] name failslab, interval 1, probability 10, space 0, times 52
[  181.383184][ T5155] udevd[5155]: could not touch /run/udev/queue: Cannot allocate memory
[  181.383301][ T5155] FAULT_INJECTION: forcing a failure.
[  181.383301][ T5155] name failslab, interval 1, probability 10, space 0, times 50
[  181.383329][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.383352][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.383359][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.383369][ T5155] Call Trace:
[  181.383375][ T5155]  <TASK>
[  181.383382][ T5155]  dump_stack_lvl+0x100/0x190
[  181.383405][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.383426][ T5155]  should_failslab+0xc2/0x120
[  181.383471][ T5155]  __kmalloc_noprof+0xfc/0x820
[  181.383495][ T5155]  ? tomoyo_encode2+0xfb/0x3c0
[  181.383525][ T5155]  tomoyo_encode2+0xfb/0x3c0
[  181.383555][ T5155]  tomoyo_encode+0x29/0x50
[  181.383579][ T5155]  tomoyo_realpath_from_path+0x18c/0x690
[  181.383609][ T5155]  tomoyo_check_open_permission+0x2af/0x3c0
[  181.383635][ T5155]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  181.383664][ T5155]  ? hook_file_open+0x24f/0x8f0
[  181.383697][ T5155]  ? lock_acquire+0x1b9/0x370
[  181.383733][ T5155]  tomoyo_file_open+0x6b/0x90
[  181.383752][ T5155]  security_file_open+0xb5/0x1e0
[  181.383778][ T5155]  do_dentry_open+0x588/0x14d0
[  181.383803][ T5155]  vfs_open+0x82/0x3f0
[  181.383829][ T5155]  path_openat+0x2873/0x4280
[  181.383859][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.383885][ T5155]  do_file_open+0x20e/0x430
[  181.383906][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.383943][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.383964][ T5155]  ? do_getname+0x191/0x390
[  181.383990][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.384013][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.384043][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.384085][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.384118][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.384141][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.384173][ T5155]  do_syscall_64+0x115/0x840
[  181.384193][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.384214][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.384233][ T5155] RIP: 0033:0x7f182a2a7407
[  181.384249][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.384265][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.384281][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.384293][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.384304][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.384314][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.384324][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.384348][ T5155]  </TASK>
[  181.385157][ T5155] FAULT_INJECTION: forcing a failure.
[  181.385157][ T5155] name failslab, interval 1, probability 10, space 0, times 49
[  181.386548][   T48] FAULT_INJECTION: forcing a failure.
[  181.386548][   T48] name failslab, interval 1, probability 10, space 0, times 49
[  181.386943][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.386961][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.386965][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.386973][  T821] Workqueue: events_unbound cfg80211_wiphy_work
[  181.386992][  T821] Call Trace:
[  181.386996][  T821]  <TASK>
[  181.387000][  T821]  dump_stack_lvl+0x100/0x190
[  181.387014][  T821]  should_fail_ex.cold+0x5/0xa
[  181.387026][  T821]  should_failslab+0xc2/0x120
[  181.387042][  T821]  __kmalloc_noprof+0xfc/0x820
[  181.387056][  T821]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.387083][  T821]  ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.387102][  T821]  ? find_held_lock+0x2b/0x80
[  181.387116][  T821]  ? ieee80211_sta_active_ibss+0x222/0x420
[  181.387132][  T821]  ? ieee80211_sta_active_ibss+0x222/0x420
[  181.387150][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.387168][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.387185][  T821]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  181.387208][  T821]  ? rcu_is_watching+0x12/0xc0
[  181.387224][  T821]  ieee80211_ibss_rx_queued_mgmt+0xc96/0x1c70
[  181.387241][  T821]  ? do_raw_spin_lock+0x128/0x260
[  181.387254][  T821]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  181.387277][  T821]  ieee80211_iface_work+0xa9a/0x1070
[  181.387297][  T821]  cfg80211_wiphy_work+0x2b7/0x550
[  181.387315][  T821]  process_one_work+0xa23/0x1940
[  181.387338][  T821]  ? __pfx_process_one_work+0x10/0x10
[  181.387357][  T821]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  181.387374][  T821]  worker_thread+0x5ef/0xe50
[  181.387393][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.387409][  T821]  ? kthread+0x13a/0x450
[  181.387423][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.387437][  T821]  kthread+0x370/0x450
[  181.387451][  T821]  ? __pfx_kthread+0x10/0x10
[  181.387466][  T821]  ret_from_fork+0x72b/0xd50
[  181.387480][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  181.387494][  T821]  ? __switch_to+0x800/0x10f0
[  181.387511][  T821]  ? __pfx_kthread+0x10/0x10
[  181.387526][  T821]  ret_from_fork_asm+0x1a/0x30
[  181.387548][  T821]  </TASK>
[  181.387696][  T821] FAULT_INJECTION: forcing a failure.
[  181.387696][  T821] name failslab, interval 1, probability 10, space 0, times 48
[  181.387712][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.387727][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.387731][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.387737][  T821] Workqueue: events_unbound nsim_dev_trap_report_work
[  181.387753][  T821] Call Trace:
[  181.387756][  T821]  <TASK>
[  181.387760][  T821]  dump_stack_lvl+0x100/0x190
[  181.387772][  T821]  should_fail_ex.cold+0x5/0xa
[  181.387784][  T821]  should_failslab+0xc2/0x120
[  181.387799][  T821]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.387813][  T821]  ? __alloc_skb+0x140/0x710
[  181.387829][  T821]  __alloc_skb+0x140/0x710
[  181.387842][  T821]  ? __alloc_skb+0x5b7/0x710
[  181.387855][  T821]  ? __pfx___alloc_skb+0x10/0x10
[  181.387871][  T821]  ? kfree_skbmem+0x19f/0x210
[  181.387883][  T821]  nsim_dev_trap_report_work+0x2af/0xd20
[  181.387904][  T821]  process_one_work+0xa23/0x1940
[  181.387924][  T821]  ? __pfx_process_one_work+0x10/0x10
[  181.387943][  T821]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  181.387959][  T821]  worker_thread+0x5ef/0xe50
[  181.387978][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.387994][  T821]  ? kthread+0x13a/0x450
[  181.388007][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.388022][  T821]  kthread+0x370/0x450
[  181.388035][  T821]  ? __pfx_kthread+0x10/0x10
[  181.388050][  T821]  ret_from_fork+0x72b/0xd50
[  181.388064][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  181.388082][  T821]  ? __switch_to+0x800/0x10f0
[  181.388099][  T821]  ? __pfx_kthread+0x10/0x10
[  181.388114][  T821]  ret_from_fork_asm+0x1a/0x30
[  181.388134][  T821]  </TASK>
[  181.388857][   T38] FAULT_INJECTION: forcing a failure.
[  181.388857][   T38] name failslab, interval 1, probability 10, space 0, times 47
[  181.390001][   T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u33:2 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.390017][   T48] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.390022][   T48] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.390029][   T48] Workqueue: events_unbound nsim_dev_trap_report_work
[  181.390062][   T48] Call Trace:
[  181.390067][   T48]  <TASK>
[  181.390071][   T48]  dump_stack_lvl+0x100/0x190
[  181.390085][   T48]  should_fail_ex.cold+0x5/0xa
[  181.390097][   T48]  should_failslab+0xc2/0x120
[  181.390112][   T48]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.390127][   T48]  ? __alloc_skb+0x140/0x710
[  181.390144][   T48]  __alloc_skb+0x140/0x710
[  181.390157][   T48]  ? __alloc_skb+0x5b7/0x710
[  181.390170][   T48]  ? __pfx___alloc_skb+0x10/0x10
[  181.390185][   T48]  ? kfree_skbmem+0x19f/0x210
[  181.390197][   T48]  nsim_dev_trap_report_work+0x2af/0xd20
[  181.390218][   T48]  process_one_work+0xa23/0x1940
[  181.390239][   T48]  ? __pfx_process_one_work+0x10/0x10
[  181.390259][   T48]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  181.390275][   T48]  worker_thread+0x5ef/0xe50
[  181.390294][   T48]  ? __pfx_worker_thread+0x10/0x10
[  181.390310][   T48]  ? kthread+0x13a/0x450
[  181.390322][   T48]  ? __pfx_worker_thread+0x10/0x10
[  181.390337][   T48]  kthread+0x370/0x450
[  181.390350][   T48]  ? __pfx_kthread+0x10/0x10
[  181.390367][   T48]  ret_from_fork+0x72b/0xd50
[  181.390387][   T48]  ? __pfx_ret_from_fork+0x10/0x10
[  181.390406][   T48]  ? __switch_to+0x800/0x10f0
[  181.390430][   T48]  ? __pfx_kthread+0x10/0x10
[  181.390453][   T48]  ret_from_fork_asm+0x1a/0x30
[  181.390491][   T48]  </TASK>
[  181.392246][ T7559] FAULT_INJECTION: forcing a failure.
[  181.392246][ T7559] name failslab, interval 1, probability 10, space 0, times 44
[  181.394211][   T38] CPU: 2 UID: 0 PID: 38 Comm: kworker/u33:1 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.394238][   T38] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.394246][   T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.394258][   T38] Workqueue: events_unbound cfg80211_wiphy_work
[  181.394288][   T38] Call Trace:
[  181.394295][   T38]  <TASK>
[  181.394303][   T38]  dump_stack_lvl+0x100/0x190
[  181.394326][   T38]  should_fail_ex.cold+0x5/0xa
[  181.394347][   T38]  should_failslab+0xc2/0x120
[  181.394372][   T38]  __kmalloc_noprof+0xfc/0x820
[  181.394396][   T38]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.394430][   T38]  ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.394464][   T38]  ? kasan_save_stack+0x3f/0x50
[  181.394486][   T38]  ? kasan_save_stack+0x30/0x50
[  181.394508][   T38]  ? __kasan_kmalloc+0xaa/0xb0
[  181.394527][   T38]  ? __kmalloc_noprof+0x322/0x820
[  181.394550][   T38]  ? lock_acquire+0x1b9/0x370
[  181.394579][   T38]  ? find_held_lock+0x2b/0x80
[  181.394601][   T38]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.394625][   T38]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.394648][   T38]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  181.394685][   T38]  ? kvfree_call_rcu+0x1be/0x4f0
[  181.394707][   T38]  ? __asan_memcpy+0x3c/0x60
[  181.394728][   T38]  ieee80211_inform_bss+0x159/0x1170
[  181.394759][   T38]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.394791][   T38]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.394819][   T38]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.394846][   T38]  cfg80211_inform_single_bss_data+0x898/0x1dc0
[  181.394880][   T38]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.394924][   T38]  ? __kfence_alloc+0x61a/0x15c0
[  181.394955][   T38]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.394979][   T38]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.395018][   T38]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.395055][   T38]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  181.395083][   T38]  ? _ieee802_11_parse_elems_full+0x687/0x5200
[  181.395115][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.395142][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.395178][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.395205][   T38]  ? find_held_lock+0x2b/0x80
[  181.395227][   T38]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.395254][   T38]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.395289][   T38]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.395323][   T38]  ieee80211_bss_info_update+0x310/0xab0
[  181.395353][   T38]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.395388][   T38]  ? rcu_is_watching+0x12/0xc0
[  181.395410][   T38]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.395435][   T38]  ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70
[  181.395467][   T38]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  181.395508][   T38]  ieee80211_iface_work+0xa9a/0x1070
[  181.395542][   T38]  cfg80211_wiphy_work+0x2b7/0x550
[  181.395572][   T38]  process_one_work+0xa23/0x1940
[  181.395629][   T38]  ? __pfx_process_one_work+0x10/0x10
[  181.395664][   T38]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  181.395693][   T38]  worker_thread+0x5ef/0xe50
[  181.395725][   T38]  ? kthread+0x13a/0x450
[  181.395747][   T38]  ? __pfx_worker_thread+0x10/0x10
[  181.395771][   T38]  kthread+0x370/0x450
[  181.395794][   T38]  ? __pfx_kthread+0x10/0x10
[  181.395820][   T38]  ret_from_fork+0x72b/0xd50
[  181.395843][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  181.395867][   T38]  ? __switch_to+0x800/0x10f0
[  181.395894][   T38]  ? __pfx_kthread+0x10/0x10
[  181.395920][   T38]  ret_from_fork_asm+0x1a/0x30
[  181.395954][   T38]  </TASK>
[  181.397243][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.397268][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.397275][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.397284][ T5155] Call Trace:
[  181.397290][ T5155]  <TASK>
[  181.397296][ T5155]  dump_stack_lvl+0x100/0x190
[  181.397319][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.397332][ T5155]  should_failslab+0xc2/0x120
[  181.397348][ T5155]  __kmalloc_noprof+0xfc/0x820
[  181.397362][ T5155]  ? tomoyo_encode2+0xfb/0x3c0
[  181.397385][ T5155]  tomoyo_encode2+0xfb/0x3c0
[  181.397412][ T5155]  tomoyo_encode+0x29/0x50
[  181.397435][ T5155]  tomoyo_realpath_from_path+0x18c/0x690
[  181.397458][ T5155]  tomoyo_check_open_permission+0x2af/0x3c0
[  181.397473][ T5155]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  181.397491][ T5155]  ? hook_file_open+0x24f/0x8f0
[  181.397519][ T5155]  ? lock_acquire+0x1b9/0x370
[  181.397551][ T5155]  tomoyo_file_open+0x6b/0x90
[  181.397568][ T5155]  security_file_open+0xb5/0x1e0
[  181.397591][ T5155]  do_dentry_open+0x588/0x14d0
[  181.397615][ T5155]  vfs_open+0x82/0x3f0
[  181.397639][ T5155]  path_openat+0x2873/0x4280
[  181.397667][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.397689][ T5155]  do_file_open+0x20e/0x430
[  181.397709][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.397742][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.397761][ T5155]  ? do_getname+0x191/0x390
[  181.397783][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.397804][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.397826][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.397851][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.397878][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.397900][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.397931][ T5155]  do_syscall_64+0x115/0x840
[  181.397950][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.397971][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.397987][ T5155] RIP: 0033:0x7f182a2a7407
[  181.398002][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.398017][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.398034][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.398045][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.398056][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.398066][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.398082][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.398099][ T5155]  </TASK>
[  181.398517][  T109] CPU: 2 UID: 0 PID: 109 Comm: kworker/u33:5 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.398537][  T109] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.398541][  T109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.398549][  T109] Workqueue: events_unbound cfg80211_wiphy_work
[  181.398567][  T109] Call Trace:
[  181.398571][  T109]  <TASK>
[  181.398575][  T109]  dump_stack_lvl+0x100/0x190
[  181.398589][  T109]  should_fail_ex.cold+0x5/0xa
[  181.398601][  T109]  should_failslab+0xc2/0x120
[  181.398616][  T109]  __kmalloc_noprof+0xfc/0x820
[  181.398630][  T109]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.398649][  T109]  cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.398665][  T109]  ? unwind_next_frame+0x3be/0x2090
[  181.398685][  T109]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.398701][  T109]  ? ret_from_fork_asm+0x1a/0x30
[  181.398724][  T109]  ? stack_trace_save+0x8e/0xc0
[  181.398740][  T109]  ? __pfx_stack_trace_save+0x10/0x10
[  181.398757][  T109]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.398772][  T109]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.398788][  T109]  ? __kmalloc_noprof+0x322/0x820
[  181.398800][  T109]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.398818][  T109]  ? cfg80211_wiphy_work+0x2b7/0x550
[  181.398832][  T109]  ? process_one_work+0xa23/0x1940
[  181.398848][  T109]  ? worker_thread+0x5ef/0xe50
[  181.398862][  T109]  ? kthread+0x370/0x450
[  181.398890][  T109]  ? ret_from_fork+0x72b/0xd50
[  181.398903][  T109]  ? ret_from_fork_asm+0x1a/0x30
[  181.398920][  T109]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.398939][  T109]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  181.398956][  T109]  ? _ieee802_11_parse_elems_full+0x687/0x5200
[  181.398976][  T109]  ? __lock_acquire+0x49f/0x1a40
[  181.398993][  T109]  ? __lock_acquire+0x49f/0x1a40
[  181.399028][  T109]  ? __lock_acquire+0x49f/0x1a40
[  181.399047][  T109]  ? find_held_lock+0x2b/0x80
[  181.399060][  T109]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.399076][  T109]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.399097][  T109]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.399117][  T109]  ieee80211_bss_info_update+0x310/0xab0
[  181.399135][  T109]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.399157][  T109]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.399155][ T5155] FAULT_INJECTION: forcing a failure.
[  181.399155][ T5155] name failslab, interval 1, probability 10, space 0, times 42
[  181.399172][  T109]  ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70
[  181.399191][  T109]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  181.399214][  T109]  ieee80211_iface_work+0xa9a/0x1070
[  181.399234][  T109]  cfg80211_wiphy_work+0x2b7/0x550
[  181.399252][  T109]  process_one_work+0xa23/0x1940
[  181.399273][  T109]  ? __pfx_process_one_work+0x10/0x10
[  181.399293][  T109]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  181.399310][  T109]  worker_thread+0x5ef/0xe50
[  181.399329][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.399345][  T109]  ? kthread+0x13a/0x450
[  181.399358][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.399372][  T109]  kthread+0x370/0x450
[  181.399386][  T109]  ? __pfx_kthread+0x10/0x10
[  181.399401][  T109]  ret_from_fork+0x72b/0xd50
[  181.399415][  T109]  ? __pfx_ret_from_fork+0x10/0x10
[  181.399428][  T109]  ? __switch_to+0x800/0x10f0
[  181.399445][  T109]  ? __pfx_kthread+0x10/0x10
[  181.399460][  T109]  ret_from_fork_asm+0x1a/0x30
[  181.399481][  T109]  </TASK>
[  181.400297][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.400314][ T7559] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.400318][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.400325][ T7559] Call Trace:
[  181.400329][ T7559]  <TASK>
[  181.400333][ T7559]  dump_stack_lvl+0x100/0x190
[  181.400348][ T7559]  should_fail_ex.cold+0x5/0xa
[  181.400360][ T7559]  should_failslab+0xc2/0x120
[  181.400375][ T7559]  __kmalloc_cache_noprof+0x91/0x6c0
[  181.400386][ T7559]  ? lock_acquire+0x1b9/0x370
[  181.400402][ T7559]  ? __hw_addr_create+0x57/0x220
[  181.400415][ T7559]  __hw_addr_create+0x57/0x220
[  181.400427][ T7559]  __hw_addr_add_ex+0x32b/0x650
[  181.400438][ T7559]  ? stack_depot_init+0x38/0x80
[  181.400455][ T7559]  ? __pfx___hw_addr_add_ex+0x10/0x10
[  181.400467][ T7559]  ? __mutex_unlock_slowpath+0x35d/0x930
[  181.400486][ T7559]  dev_addr_init+0x161/0x250
[  181.400499][ T7559]  ? __pfx_dev_addr_init+0x10/0x10
[  181.400513][ T7559]  ? __pfx_hsr_dev_setup+0x10/0x10
[  181.400530][ T7559]  ? __pfx_hsr_dev_setup+0x10/0x10
[  181.400546][ T7559]  alloc_netdev_mqs+0x363/0x15c0
[  181.400565][ T7559]  rtnl_create_link+0xc13/0xf80
[  181.400582][ T7559]  rtnl_newlink+0x13bd/0x2380
[  181.400603][ T7559]  ? __pfx_rtnl_newlink+0x10/0x10
[  181.400617][ T7559]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  181.400633][ T7559]  ? __kernel_text_address+0xd/0x30
[  181.400649][ T7559]  ? unwind_get_return_address+0x59/0xa0
[  181.400674][ T7559]  ? __pfx_stack_trace_save+0x10/0x10
[  181.400694][ T7559]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  181.400709][ T7559]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  181.400725][ T7559]  ? __pfx_rtnl_newlink+0x10/0x10
[  181.400741][ T7559]  rtnetlink_rcv_msg+0x95e/0xe90
[  181.400777][ T7559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  181.400796][ T7559]  ? __lock_acquire+0x49f/0x1a40
[  181.400815][ T7559]  netlink_rcv_skb+0x159/0x420
[  181.400827][ T7559]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  181.400844][ T7559]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.400861][ T7559]  ? netlink_deliver_tap+0x1ae/0xcc0
[  181.400874][ T7559]  netlink_unicast+0x585/0x850
[  181.400888][ T7559]  ? __pfx_netlink_unicast+0x10/0x10
[  181.400904][ T7559]  netlink_sendmsg+0x8b0/0xda0
[  181.400918][ T7559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.400932][ T7559]  ? apparmor_socket_sendmsg+0x15b/0x270
[  181.400946][ T7559]  __sys_sendto+0x48b/0x4e0
[  181.400959][ T7559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.400972][ T7559]  ? __pfx___sys_sendto+0x10/0x10
[  181.400998][ T7559]  __ia32_compat_sys_socketcall+0x59a/0x770
[  181.401018][ T7559]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  181.401038][ T7559]  ? __pfx_fput_close_sync+0x10/0x10
[  181.401062][ T7559]  do_int80_emulation+0x14b/0x720
[  181.401078][ T7559]  asm_int80_emulation+0x1a/0x20
[  181.401089][ T7559] RIP: 0023:0xf717736b
[  181.401099][ T7559] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  181.401110][ T7559] RSP: 002b:00000000ffc8765c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[  181.401122][ T7559] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffc87704
[  181.401129][ T7559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  181.401135][ T7559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.401142][ T7559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  181.401148][ T7559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.401161][ T7559]  </TASK>
[  181.401302][ T7559] FAULT_INJECTION: forcing a failure.
[  181.401302][ T7559] name failslab, interval 1, probability 10, space 0, times 40
[  181.407873][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.407898][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.407904][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.407914][ T5155] Call Trace:
[  181.407920][ T5155]  <TASK>
[  181.407926][ T5155]  dump_stack_lvl+0x100/0x190
[  181.407948][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.407967][ T5155]  should_failslab+0xc2/0x120
[  181.407990][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.408010][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.408034][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.408060][ T5155]  security_file_alloc+0x34/0x2c0
[  181.408085][ T5155]  init_file+0x95/0x480
[  181.408099][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.408113][ T5155]  path_openat+0xe7/0x4280
[  181.408124][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.408139][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.408151][ T5155]  ? do_getname+0x35/0x390
[  181.408164][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.408177][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.408195][ T5155]  ? do_syscall_64+0x115/0x840
[  181.408214][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.408238][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.408258][ T5155]  do_file_open+0x20e/0x430
[  181.408271][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.408304][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.408322][ T5155]  ? do_getname+0x191/0x390
[  181.408365][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.408387][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.408409][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.408433][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.408462][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.408484][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.408514][ T5155]  do_syscall_64+0x115/0x840
[  181.408532][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.408551][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.408568][ T5155] RIP: 0033:0x7f182a2a7407
[  181.408583][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.408598][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.408615][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.408623][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.408630][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.408637][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.408643][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.408657][ T5155]  </TASK>
[  181.409979][ T5155] FAULT_INJECTION: forcing a failure.
[  181.409979][ T5155] name failslab, interval 1, probability 10, space 0, times 37
[  181.412515][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.412533][ T7559] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.412537][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.412544][ T7559] Call Trace:
[  181.412548][ T7559]  <TASK>
[  181.412552][ T7559]  dump_stack_lvl+0x100/0x190
[  181.412567][ T7559]  should_fail_ex.cold+0x5/0xa
[  181.412579][ T7559]  should_failslab+0xc2/0x120
[  181.412594][ T7559]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.412607][ T7559]  ? __pfx_map_id_range_down+0x10/0x10
[  181.412623][ T7559]  ? security_inode_alloc+0x3b/0x2c0
[  181.412638][ T7559]  security_inode_alloc+0x3b/0x2c0
[  181.412655][ T7559]  inode_init_always_gfp+0xc77/0xfb0
[  181.412668][ T7559]  alloc_inode+0x8e/0x250
[  181.412682][ T7559]  sock_alloc+0x44/0x280
[  181.412697][ T7559]  ? security_socket_create+0x7f/0x250
[  181.412709][ T7559]  __sock_create+0xc2/0x860
[  181.412723][ T7559]  __sys_socket+0x14d/0x260
[  181.412734][ T7559]  ? __pfx___sys_socket+0x10/0x10
[  181.412768][ T7559]  __ia32_compat_sys_socketcall+0x65b/0x770
[  181.412788][ T7559]  ? __ia32_compat_sys_socketcall+0x2f6/0x770
[  181.412806][ T7559]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  181.412832][ T7559]  __do_fast_syscall_32+0xe7/0x970
[  181.412846][ T7559]  ? lockdep_hardirqs_on+0x78/0x100
[  181.412859][ T7559]  do_fast_syscall_32+0x32/0x70
[  181.412874][ T7559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.412888][ T7559] RIP: 0023:0xf7f78fec
[  181.412902][ T7559] Code: Unable to access opcode bytes at 0xf7f78fc2.
[  181.412907][ T7559] RSP: 002b:00000000ffc87670 EFLAGS: 00000282 ORIG_RAX: 0000000000000066
[  181.412918][ T7559] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffc87680
[  181.412925][ T7559] RDX: 00000000f7406ff4 RSI: 00000000f72427c5 RDI: 00000000ffc876dc
[  181.412932][ T7559] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  181.412938][ T7559] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  181.412945][ T7559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.412957][ T7559]  </TASK>
[  181.412973][ T7559] socket: no more sockets
[  181.417715][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.417741][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.417745][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.417752][ T5155] Call Trace:
[  181.417756][ T5155]  <TASK>
[  181.417761][ T5155]  dump_stack_lvl+0x100/0x190
[  181.417776][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.417788][ T5155]  should_failslab+0xc2/0x120
[  181.417809][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.417831][ T5155]  ? do_getname+0x35/0x390
[  181.417855][ T5155]  do_getname+0x35/0x390
[  181.417878][ T5155]  do_sys_openat2+0xc7/0x1e0
[  181.417899][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.417922][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.417947][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.417974][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.417997][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.418026][ T5155]  do_syscall_64+0x115/0x840
[  181.418045][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.418065][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.418088][ T5155] RIP: 0033:0x7f182a2a7407
[  181.418103][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.418119][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.418136][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.418147][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.418158][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.418168][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.418178][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.418200][ T5155]  </TASK>
[  181.419303][ T5155] FAULT_INJECTION: forcing a failure.
[  181.419303][ T5155] name failslab, interval 1, probability 10, space 0, times 35
[  181.420075][ T7559] FAULT_INJECTION: forcing a failure.
[  181.420075][ T7559] name failslab, interval 1, probability 10, space 0, times 35
[  181.422703][ T5155] CPU: 3 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.422721][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.422725][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.422733][ T5155] Call Trace:
[  181.422738][ T5155]  <TASK>
[  181.422744][ T5155]  dump_stack_lvl+0x100/0x190
[  181.422765][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.422784][ T5155]  should_failslab+0xc2/0x120
[  181.422819][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.422841][ T5155]  ? do_getname+0x35/0x390
[  181.422865][ T5155]  do_getname+0x35/0x390
[  181.422887][ T5155]  do_sys_openat2+0xc7/0x1e0
[  181.422910][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.422933][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.422957][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.422984][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.423006][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.423035][ T5155]  do_syscall_64+0x115/0x840
[  181.423053][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.423080][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.423097][ T5155] RIP: 0033:0x7f182a2a7407
[  181.423112][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.423125][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.423137][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.423144][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.423151][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.423157][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.423164][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.423177][ T5155]  </TASK>
[  181.423344][ T7036] FAULT_INJECTION: forcing a failure.
[  181.423344][ T7036] name failslab, interval 1, probability 10, space 0, times 35
[  181.423541][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.423558][ T7559] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.423562][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.423569][ T7559] Call Trace:
[  181.423573][ T7559]  <TASK>
[  181.423577][ T7559]  dump_stack_lvl+0x100/0x190
[  181.423591][ T7559]  should_fail_ex.cold+0x5/0xa
[  181.423603][ T7559]  should_failslab+0xc2/0x120
[  181.423618][ T7559]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  181.423633][ T7559]  ? __d_alloc+0x35/0xa50
[  181.423647][ T7559]  __d_alloc+0x35/0xa50
[  181.423660][ T7559]  d_alloc_pseudo+0x1c/0xc0
[  181.423676][ T7559]  alloc_file_pseudo+0x118/0x290
[  181.423697][ T7559]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  181.423717][ T7559]  ? alloc_fd+0x471/0x7a0
[  181.423735][ T7559]  sock_alloc_file+0x50/0x210
[  181.423759][ T7559]  __sys_socket+0x1c0/0x260
[  181.423778][ T7559]  ? __pfx___sys_socket+0x10/0x10
[  181.423803][ T7559]  __ia32_compat_sys_socketcall+0x65b/0x770
[  181.423812][ T5155] FAULT_INJECTION: forcing a failure.
[  181.423812][ T5155] name failslab, interval 1, probability 10, space 0, times 34
[  181.423829][ T7559]  ? __ia32_compat_sys_socketcall+0x2f6/0x770
[  181.423848][ T7559]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  181.423874][ T7559]  __do_fast_syscall_32+0xe7/0x970
[  181.423888][ T7559]  ? lockdep_hardirqs_on+0x78/0x100
[  181.423902][ T7559]  do_fast_syscall_32+0x32/0x70
[  181.423916][ T7559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.423930][ T7559] RIP: 0023:0xf7f78fec
[  181.423945][ T7559] Code: Unable to access opcode bytes at 0xf7f78fc2.
[  181.423950][ T7559] RSP: 002b:00000000ffc87670 EFLAGS: 00000282 ORIG_RAX: 0000000000000066
[  181.423961][ T7559] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffc87680
[  181.423968][ T7559] RDX: 00000000f7406ff4 RSI: 00000000f72427c5 RDI: 00000000ffc876dc
[  181.423975][ T7559] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  181.423981][ T7559] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[  181.423988][ T7559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.424001][ T7559]  </TASK>
[  181.428647][ T7036] CPU: 2 UID: 0 PID: 7036 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.428667][ T7036] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.428671][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.428678][ T7036] Call Trace:
[  181.428683][ T7036]  <TASK>
[  181.428688][ T7036]  dump_stack_lvl+0x100/0x190
[  181.428704][ T7036]  should_fail_ex.cold+0x5/0xa
[  181.428717][ T7036]  should_failslab+0xc2/0x120
[  181.428733][ T7036]  __kmalloc_noprof+0xfc/0x820
[  181.428769][ T7036]  ? kobject_get_path+0xcf/0x2c0
[  181.428788][ T7036]  kobject_get_path+0xcf/0x2c0
[  181.428807][ T7036]  kobject_uevent_env+0x287/0x18b0
[  181.428824][ T7036]  ? bus_to_subsys+0x114/0x150
[  181.428838][ T7036]  device_del+0x605/0x9b0
[  181.428854][ T7036]  ? __pfx_device_del+0x10/0x10
[  181.428868][ T7036]  ? __pfx_device_find_child+0x10/0x10
[  181.428881][ T7036]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  181.428902][ T7036]  device_unregister+0x1d/0xe0
[  181.428916][ T7036]  hci_conn_del_sysfs+0xb9/0x1a0
[  181.428933][ T7036]  hci_conn_del+0x506/0x1180
[  181.428950][ T7036]  hci_conn_hash_flush+0x186/0x280
[  181.428967][ T7036]  hci_dev_close_sync+0x5cf/0x13c0
[  181.428983][ T7036]  ? find_held_lock+0x2b/0x80
[  181.428998][ T7036]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  181.429018][ T7036]  hci_dev_do_close+0x2e/0xb0
[  181.429039][ T7036]  hci_unregister_dev+0x23f/0x690
[  181.429055][ T7036]  vhci_release+0x17d/0x230
[  181.429068][ T7036]  ? __pfx_vhci_release+0x10/0x10
[  181.429081][ T7036]  __fput+0x3ff/0xb50
[  181.429098][ T7036]  task_work_run+0x150/0x240
[  181.429115][ T7036]  ? __pfx_task_work_run+0x10/0x10
[  181.429134][ T7036]  do_exit+0x951/0x2ae0
[  181.429152][ T7036]  ? do_raw_spin_lock+0x128/0x260
[  181.429164][ T7036]  ? __pfx_do_exit+0x10/0x10
[  181.429177][ T7036]  ? do_group_exit+0x1bd/0x2a0
[  181.429192][ T7036]  ? rcu_is_watching+0x12/0xc0
[  181.429207][ T7036]  do_group_exit+0xd5/0x2a0
[  181.429223][ T7036]  __ia32_sys_exit_group+0x3e/0x50
[  181.429239][ T7036]  ia32_sys_call+0x19ea/0x19f0
[  181.429255][ T7036]  __do_fast_syscall_32+0xe7/0x970
[  181.429269][ T7036]  ? lockdep_hardirqs_on+0x78/0x100
[  181.429283][ T7036]  do_fast_syscall_32+0x32/0x70
[  181.429297][ T7036]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.429311][ T7036] RIP: 0023:0xf700efec
[  181.429320][ T7036] Code: Unable to access opcode bytes at 0xf700efc2.
[  181.429325][ T7036] RSP: 002b:00000000ffefaa8c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc
[  181.429336][ T7036] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  181.429343][ T7036] RDX: 00000000f7135037 RSI: 00000000f73dd300 RDI: 00000000f72114d9
[  181.429349][ T7036] RBP: 00000000ffefaae8 R08: 0000000000000000 R09: 0000000000000000
[  181.429356][ T7036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  181.429362][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.429376][ T7036]  </TASK>
[  181.430560][ T7036] FAULT_INJECTION: forcing a failure.
[  181.430560][ T7036] name failslab, interval 1, probability 10, space 0, times 31
[  181.433430][  T821] FAULT_INJECTION: forcing a failure.
[  181.433430][  T821] name failslab, interval 1, probability 10, space 0, times 30
[  181.436554][ T7036] CPU: 2 UID: 0 PID: 7036 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.436581][ T7036] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.436588][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.436597][ T7036] Call Trace:
[  181.436605][ T7036]  <TASK>
[  181.436612][ T7036]  dump_stack_lvl+0x100/0x190
[  181.436639][ T7036]  should_fail_ex.cold+0x5/0xa
[  181.436659][ T7036]  should_failslab+0xc2/0x120
[  181.436678][ T7036]  __kmalloc_cache_noprof+0x91/0x6c0
[  181.436690][ T7036]  ? kobject_uevent_env+0x263/0x18b0
[  181.436704][ T7036]  kobject_uevent_env+0x263/0x18b0
[  181.436717][ T7036]  ? bus_to_subsys+0x114/0x150
[  181.436731][ T7036]  device_del+0x605/0x9b0
[  181.436767][ T7036]  ? __pfx_device_del+0x10/0x10
[  181.436782][ T7036]  ? _raw_read_unlock+0x28/0x50
[  181.436794][ T7036]  ? hci_sock_dev_event+0xb6/0x630
[  181.436810][ T7036]  rfkill_unregister+0xde/0x2c0
[  181.436823][ T7036]  hci_unregister_dev+0x34f/0x690
[  181.436839][ T7036]  vhci_release+0x17d/0x230
[  181.436852][ T7036]  ? __pfx_vhci_release+0x10/0x10
[  181.436865][ T7036]  __fput+0x3ff/0xb50
[  181.436881][ T7036]  task_work_run+0x150/0x240
[  181.436899][ T7036]  ? __pfx_task_work_run+0x10/0x10
[  181.436918][ T7036]  do_exit+0x951/0x2ae0
[  181.436935][ T7036]  ? do_raw_spin_lock+0x128/0x260
[  181.436947][ T7036]  ? __pfx_do_exit+0x10/0x10
[  181.436961][ T7036]  ? do_group_exit+0x1bd/0x2a0
[  181.436976][ T7036]  ? rcu_is_watching+0x12/0xc0
[  181.436991][ T7036]  do_group_exit+0xd5/0x2a0
[  181.437007][ T7036]  __ia32_sys_exit_group+0x3e/0x50
[  181.437027][ T7036]  ia32_sys_call+0x19ea/0x19f0
[  181.437042][ T7036]  __do_fast_syscall_32+0xe7/0x970
[  181.437056][ T7036]  ? lockdep_hardirqs_on+0x78/0x100
[  181.437070][ T7036]  do_fast_syscall_32+0x32/0x70
[  181.437084][ T7036]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.437099][ T7036] RIP: 0023:0xf700efec
[  181.437109][ T7036] Code: Unable to access opcode bytes at 0xf700efc2.
[  181.437114][ T7036] RSP: 002b:00000000ffefaa8c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc
[  181.437125][ T7036] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  181.437132][ T7036] RDX: 00000000f7135037 RSI: 00000000f73dd300 RDI: 00000000f72114d9
[  181.437138][ T7036] RBP: 00000000ffefaae8 R08: 0000000000000000 R09: 0000000000000000
[  181.437145][ T7036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  181.437152][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.437164][ T7036]  </TASK>
[  181.445350][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.445371][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.445376][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.445383][ T5155] Call Trace:
[  181.445387][ T5155]  <TASK>
[  181.445392][ T5155]  dump_stack_lvl+0x100/0x190
[  181.445409][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.445423][ T5155]  should_failslab+0xc2/0x120
[  181.445440][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.445455][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.445472][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.445490][ T5155]  security_file_alloc+0x34/0x2c0
[  181.445506][ T5155]  init_file+0x95/0x480
[  181.445521][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.445539][ T5155]  path_openat+0xe7/0x4280
[  181.445552][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.445567][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.445580][ T5155]  ? do_getname+0x35/0x390
[  181.445593][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.445610][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.445629][ T5155]  ? do_syscall_64+0x115/0x840
[  181.445648][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.445673][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.445698][ T5155]  do_file_open+0x20e/0x430
[  181.445721][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.445758][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.445772][ T5155]  ? do_getname+0x191/0x390
[  181.445787][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.445803][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.445819][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.445837][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.445874][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.445891][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.445911][ T5155]  do_syscall_64+0x115/0x840
[  181.445924][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.445937][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.445949][ T5155] RIP: 0033:0x7f182a2a7407
[  181.445959][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.445970][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.445983][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.445990][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.445997][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.446004][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.446010][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.446028][ T5155]  </TASK>
[  181.446203][ T5155] FAULT_INJECTION: forcing a failure.
[  181.446203][ T5155] name failslab, interval 1, probability 10, space 0, times 26
[  181.450481][ T5823] FAULT_INJECTION: forcing a failure.
[  181.450481][ T5823] name failslab, interval 1, probability 10, space 0, times 26
[  181.452957][    C2] FAULT_INJECTION: forcing a failure.
[  181.452957][    C2] name failslab, interval 1, probability 10, space 0, times 26
[  181.453149][    C0] FAULT_INJECTION: forcing a failure.
[  181.453149][    C0] name failslab, interval 1, probability 10, space 0, times 26
[  181.453180][    C0] CPU: 0 UID: 0 PID: 7558 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.453207][    C0] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.453214][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.453224][    C0] Call Trace:
[  181.453233][    C0]  <IRQ>
[  181.453240][    C0]  dump_stack_lvl+0x100/0x190
[  181.453267][    C0]  should_fail_ex.cold+0x5/0xa
[  181.453289][    C0]  should_failslab+0xc2/0x120
[  181.453316][    C0]  __kmalloc_noprof+0xfc/0x820
[  181.453341][    C0]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.453373][    C0]  cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.453399][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.453432][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.453473][    C0]  ? bpf_ksym_find+0x124/0x1c0
[  181.453495][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  181.453522][    C0]  ? is_bpf_text_address+0x94/0x1a0
[  181.453551][    C0]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.453576][    C0]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.453608][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.453639][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.453664][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.453699][    C0]  ? lock_acquire+0x1b9/0x370
[  181.453729][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.453763][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.453799][    C0]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.453832][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  181.453863][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.453898][    C0]  ? i_callback+0x46/0x80
[  181.453916][    C0]  ? stack_trace_save+0x8e/0xc0
[  181.453939][    C0]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.453964][    C0]  ieee80211_scan_rx+0x4e6/0xb60
[  181.453992][    C0]  ? __lock_acquire+0x49f/0x1a40
[  181.454023][    C0]  __ieee80211_rx_handle_packet+0xbab/0xfc0
[  181.454055][    C0]  ? __pfx___ieee80211_rx_handle_packet+0x10/0x10
[  181.454076][    C0]  ? do_raw_spin_lock+0x128/0x260
[  181.454104][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  181.454128][    C0]  ? ieee80211_clean_skb+0x1a7/0x740
[  181.454156][    C0]  ieee80211_rx_list+0xf19/0x2160
[  181.454182][    C0]  ? lock_acquire+0x1b9/0x370
[  181.454207][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  181.454233][    C0]  ieee80211_rx_napi+0xdc/0x400
[  181.454253][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  181.454272][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  181.454293][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.454317][    C0]  ieee80211_handle_queued_frames+0xc8/0x120
[  181.454346][    C0]  tasklet_action_common+0x2de/0x3d0
[  181.454373][    C0]  handle_softirqs+0x1ea/0x9b0
[  181.454398][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  181.454419][    C0]  ? _raw_spin_unlock+0x28/0x50
[  181.454437][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  181.454467][    C0]  __irq_exit_rcu+0x162/0x210
[  181.454489][    C0]  irq_exit_rcu+0x9/0x30
[  181.454509][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  181.454530][    C0]  </IRQ>
[  181.454537][    C0]  <TASK>
[  181.454544][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  181.454566][    C0] RIP: 0010:kasan_byte_accessible+0x18/0x30
[  181.454599][    C0] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f
[  181.454617][    C0] RSP: 0018:ffffc90003d479c8 EFLAGS: 00000286
[  181.454634][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  181.454646][    C0] RDX: 0000000000000000 RSI: ffffffff82855126 RDI: fffffbfff1d7cff0
[  181.454658][    C0] RBP: ffffffff8ebe7f80 R08: 0000000000000000 R09: 0000000000000000
[  181.454670][    C0] R10: ffffea000199a077 R11: 0000000000000000 R12: ffffffff82855126
[  181.454682][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.454695][    C0]  ? page_ext_get+0x36/0x1a0
[  181.454723][    C0]  ? page_ext_get+0x36/0x1a0
[  181.454750][    C0]  __kasan_check_byte+0x13/0x50
[  181.454776][    C0]  lock_acquire+0x132/0x370
[  181.454803][    C0]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  181.454832][    C0]  ? __page_table_check_zero+0x27f/0x410
[  181.454861][    C0]  page_ext_get+0x36/0x1a0
[  181.454884][    C0]  ? page_ext_get+0x25/0x1a0
[  181.454907][    C0]  __reset_page_owner+0x2b/0x190
[  181.454936][    C0]  free_pages_prepare+0x586/0xd80
[  181.454961][    C0]  __free_contig_range_common+0x14f/0x250
[  181.454984][    C0]  free_pages_bulk+0x12a/0x200
[  181.455007][    C0]  vm_area_free_pages+0xad/0x2b0
[  181.455035][    C0]  vfree+0x107/0x750
[  181.455065][    C0]  ? kcov_close+0x2b/0x60
[  181.455091][    C0]  ? __pfx_kcov_close+0x10/0x10
[  181.455114][    C0]  ? rcu_is_watching+0x12/0xc0
[  181.455138][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  181.455158][    C0]  ? __pfx_kcov_close+0x10/0x10
[  181.455183][    C0]  ? __pfx_kcov_close+0x10/0x10
[  181.455208][    C0]  kcov_close+0x34/0x60
[  181.455233][    C0]  __fput+0x3ff/0xb50
[  181.455261][    C0]  task_work_run+0x150/0x240
[  181.455290][    C0]  ? __pfx_task_work_run+0x10/0x10
[  181.455323][    C0]  do_exit+0x951/0x2ae0
[  181.455351][    C0]  ? do_raw_spin_lock+0x128/0x260
[  181.455372][    C0]  ? __pfx_do_exit+0x10/0x10
[  181.455394][    C0]  ? do_group_exit+0x1bd/0x2a0
[  181.455419][    C0]  ? rcu_is_watching+0x12/0xc0
[  181.455444][    C0]  do_group_exit+0xd5/0x2a0
[  181.455469][    C0]  __ia32_sys_exit_group+0x3e/0x50
[  181.455494][    C0]  ia32_sys_call+0x19ea/0x19f0
[  181.455521][    C0]  __do_fast_syscall_32+0xe7/0x970
[  181.455548][    C0]  do_fast_syscall_32+0x32/0x70
[  181.455572][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.455595][    C0] RIP: 0023:0xf70befec
[  181.455609][    C0] Code: Unable to access opcode bytes at 0xf70befc2.
[  181.455617][    C0] RSP: 002b:00000000ff9c00fc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc
[  181.455635][    C0] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 0000000000000004
[  181.455646][    C0] RDX: 0000000000000000 RSI: 00000000f7486ff4 RDI: 0000000040186366
[  181.455659][    C0] RBP: 00000000f7221b09 R08: 0000000000000000 R09: 0000000000000000
[  181.455669][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.455679][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.455702][    C0]  </TASK>
[  181.455716][ T5823] CPU: 3 UID: 0 PID: 5823 Comm: kworker/u32:3 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.455742][ T5823] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.455748][ T5823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.455759][ T5823] Workqueue: netns cleanup_net
[  181.455787][ T5823] Call Trace:
[  181.455793][ T5823]  <TASK>
[  181.455800][ T5823]  dump_stack_lvl+0x100/0x190
[  181.455822][ T5823]  should_fail_ex.cold+0x5/0xa
[  181.455838][ T5823]  ? __lock_acquire+0x49f/0x1a40
[  181.455866][ T5823]  should_failslab+0xc2/0x120
[  181.455888][ T5823]  __kmalloc_cache_noprof+0x91/0x6c0
[  181.455905][ T5823]  ? __lock_acquire+0x49f/0x1a40
[  181.455930][ T5823]  ? nsim_fib_event_nb+0x1a8/0xe40
[  181.455961][ T5823]  nsim_fib_event_nb+0x1a8/0xe40
[  181.455988][ T5823]  ? lock_acquire+0x1b9/0x370
[  181.456015][ T5823]  notifier_call_chain+0x99/0x3f0
[  181.456043][ T5823]  atomic_notifier_call_chain+0x71/0x1c0
[  181.456072][ T5823]  call_fib_notifiers+0x33/0x70
[  181.456099][ T5823]  fib6_del+0xebf/0x1790
[  181.456126][ T5823]  ? __pfx_fib6_del+0x10/0x10
[  181.456141][ T5823]  ? fib6_ifdown+0xcd/0x7e0
[  181.456159][ T5823]  fib6_clean_node+0x424/0x5d0
[  181.456173][ T5823]  ? __pfx_fib6_clean_node+0x10/0x10
[  181.456190][ T5823]  fib6_walk_continue+0x451/0x8d0
[  181.456211][ T5823]  fib6_walk+0x182/0x370
[  181.456223][ T5823]  fib6_clean_tree+0xdc/0x120
[  181.456233][ T5823]  ? __pfx_fib6_ifdown+0x10/0x10
[  181.456249][ T5823]  ? __pfx_fib6_clean_tree+0x10/0x10
[  181.456262][ T5823]  ? __pfx_fib6_clean_node+0x10/0x10
[  181.456274][ T5823]  ? __pfx_fib6_ifdown+0x10/0x10
[  181.456294][ T5823]  ? __pfx_fib6_ifdown+0x10/0x10
[  181.456309][ T5823]  __fib6_clean_all+0x107/0x2d0
[  181.456324][ T5823]  rt6_disable_ip+0x2a6/0x980
[  181.456340][ T5823]  ? trace_contention_end+0x126/0x160
[  181.456353][ T5823]  ? __pfx_rt6_disable_ip+0x10/0x10
[  181.456374][ T5823]  addrconf_ifdown.isra.0+0x11d/0x1b70
[  181.456389][ T5823]  ? trace_contention_end+0x126/0x160
[  181.456407][ T5823]  ? __mutex_lock+0x26d/0x1bd0
[  181.456427][ T5823]  ? tee_netdev_event+0x8a/0x3d0
[  181.456446][ T5823]  ? find_held_lock+0x2b/0x80
[  181.456467][ T5823]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  181.456499][ T5823]  addrconf_notify+0x4a3/0x1ba0
[  181.456524][ T5823]  ? __pfx_tls_dev_event+0x10/0x10
[  181.456550][ T5823]  ? __pfx_addrconf_notify+0x10/0x10
[  181.456572][ T5823]  ? ip6mr_device_event+0x1c4/0x230
[  181.456598][ T5823]  notifier_call_chain+0x99/0x3f0
[  181.456625][ T5823]  call_netdevice_notifiers_info+0xbe/0x110
[  181.456652][ T5823]  netif_close_many+0x319/0x630
[  181.456672][ T5823]  ? __pfx_netif_close_many+0x10/0x10
[  181.456687][ T5823]  ? cleanup_net+0x499/0x920
[  181.456718][ T5823]  netif_close_many_and_unlock+0x24/0x270
[  181.456740][ T5823]  unregister_netdevice_many_notify+0x661/0x2140
[  181.456786][ T5823]  ? rcu_is_watching+0x12/0xc0
[  181.456801][ T5823]  ? __mutex_lock+0x26d/0x1bd0
[  181.456815][ T5823]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  181.456836][ T5823]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  181.456858][ T5823]  ? __pfx___mutex_lock+0x10/0x10
[  181.456884][ T5823]  unregister_netdevice_queue+0x30b/0x3c0
[  181.456909][ T5823]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  181.456941][ T5823]  nsim_destroy+0x23e/0x970
[  181.456960][ T5823]  ? nsim_dev_reload_destroy+0xf0/0x4a0
[  181.456983][ T5823]  ? nsim_dev_reload_destroy+0x10a/0x4a0
[  181.457007][ T5823]  __nsim_dev_port_del+0x194/0x2b0
[  181.457030][ T5823]  nsim_dev_reload_destroy+0x10a/0x4a0
[  181.457057][ T5823]  nsim_dev_reload_down+0x66/0xd0
[  181.457082][ T5823]  devlink_reload+0x1ae/0x7a0
[  181.457100][ T5823]  ? __pfx_devlink_reload+0x10/0x10
[  181.457121][ T5823]  devlink_pernet_pre_exit+0x247/0x370
[  181.457135][ T5823]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  181.457150][ T5823]  ? iput+0x3a/0x40
[  181.457163][ T5823]  ? sock_release+0x14d/0x1c0
[  181.457175][ T5823]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  181.457189][ T5823]  ops_undo_list+0x187/0xab0
[  181.457213][ T5823]  ? __pfx_ops_undo_list+0x10/0x10
[  181.457234][ T5823]  ? cleanup_net+0x332/0x920
[  181.457257][ T5823]  ? cleanup_net+0x332/0x920
[  181.457282][ T5823]  ? idr_destroy+0x62/0x2e0
[  181.457302][ T5823]  cleanup_net+0x499/0x920
[  181.457328][ T5823]  ? __pfx_cleanup_net+0x10/0x10
[  181.457356][ T5823]  ? rcu_is_watching+0x12/0xc0
[  181.457379][ T5823]  process_one_work+0xa23/0x1940
[  181.457415][ T5823]  ? __pfx_process_one_work+0x10/0x10
[  181.457447][ T5823]  ? __pfx_cleanup_net+0x10/0x10
[  181.457474][ T5823]  worker_thread+0x5ef/0xe50
[  181.457503][ T5823]  ? __pfx_worker_thread+0x10/0x10
[  181.457527][ T5823]  ? kthread+0x13a/0x450
[  181.457547][ T5823]  ? __pfx_worker_thread+0x10/0x10
[  181.457569][ T5823]  kthread+0x370/0x450
[  181.457591][ T5823]  ? __pfx_kthread+0x10/0x10
[  181.457613][ T5823]  ret_from_fork+0x72b/0xd50
[  181.457636][ T5823]  ? __pfx_ret_from_fork+0x10/0x10
[  181.457657][ T5823]  ? __switch_to+0x800/0x10f0
[  181.457683][ T5823]  ? __pfx_kthread+0x10/0x10
[  181.457707][ T5823]  ret_from_fork_asm+0x1a/0x30
[  181.457743][ T5823]  </TASK>
[  181.459361][    C3] FAULT_INJECTION: forcing a failure.
[  181.459361][    C3] name failslab, interval 1, probability 10, space 0, times 23
[  181.460173][    C2] CPU: 2 UID: 0 PID: 23 Comm: ksoftirqd/2 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.460203][    C2] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.460211][    C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.460222][    C2] Call Trace:
[  181.460229][    C2]  <TASK>
[  181.460237][    C2]  dump_stack_lvl+0x100/0x190
[  181.460264][    C2]  should_fail_ex.cold+0x5/0xa
[  181.460288][    C2]  should_failslab+0xc2/0x120
[  181.460314][    C2]  __kmalloc_noprof+0xfc/0x820
[  181.460339][    C2]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.460377][    C2]  ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.460411][    C2]  ? kasan_save_stack+0x3f/0x50
[  181.460435][    C2]  ? kasan_save_stack+0x30/0x50
[  181.460458][    C2]  ? __kasan_kmalloc+0xaa/0xb0
[  181.460479][    C2]  ? __kmalloc_noprof+0x322/0x820
[  181.460505][    C2]  ? lock_acquire+0x1b9/0x370
[  181.460534][    C2]  ? find_held_lock+0x2b/0x80
[  181.460557][    C2]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.460581][    C2]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.460605][    C2]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  181.460645][    C2]  ? kvfree_call_rcu+0x1be/0x4f0
[  181.460668][    C2]  ? __asan_memcpy+0x3c/0x60
[  181.460691][    C2]  ieee80211_inform_bss+0x159/0x1170
[  181.460725][    C2]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.460784][    C2]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.460815][    C2]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.460844][    C2]  cfg80211_inform_single_bss_data+0x898/0x1dc0
[  181.460879][    C2]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.460923][    C2]  ? mark_held_locks+0x40/0x70
[  181.460951][    C2]  ? find_held_lock+0x2b/0x80
[  181.460974][    C2]  ? ieee80211_rx_handlers+0xfcb/0xa740
[  181.461003][    C2]  ? ieee80211_rx_handlers+0xfcb/0xa740
[  181.461037][    C2]  ? rcu_is_watching+0x12/0xc0
[  181.461064][    C2]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.461089][    C2]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.461123][    C2]  ? __lock_acquire+0x49f/0x1a40
[  181.461153][    C2]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  181.461184][    C2]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.461241][    C2]  ? __lock_acquire+0x49f/0x1a40
[  181.461281][    C2]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.461314][    C2]  ieee80211_bss_info_update+0x310/0xab0
[  181.461345][    C2]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.461382][    C2]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.461409][    C2]  ieee80211_scan_rx+0x4e6/0xb60
[  181.461437][    C2]  ? __lock_acquire+0x49f/0x1a40
[  181.461468][    C2]  __ieee80211_rx_handle_packet+0xbab/0xfc0
[  181.461491][    C2]  ? __pfx___ieee80211_rx_handle_packet+0x10/0x10
[  181.461509][    C2]  ? do_raw_spin_lock+0x128/0x260
[  181.461534][    C2]  ? lockdep_hardirqs_on+0x78/0x100
[  181.461556][    C2]  ? ieee80211_clean_skb+0x1a7/0x740
[  181.461584][    C2]  ieee80211_rx_list+0xf19/0x2160
[  181.461610][    C2]  ? lock_acquire+0x1b9/0x370
[  181.461635][    C2]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  181.461661][    C2]  ieee80211_rx_napi+0xdc/0x400
[  181.461679][    C2]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  181.461699][    C2]  ? lockdep_hardirqs_on+0x78/0x100
[  181.461720][    C2]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.461745][    C2]  ieee80211_handle_queued_frames+0xc8/0x120
[  181.461776][    C2]  tasklet_action_common+0x2de/0x3d0
[  181.461806][    C2]  handle_softirqs+0x1ea/0x9b0
[  181.461832][    C2]  ? __pfx_handle_softirqs+0x10/0x10
[  181.461852][    C2]  ? run_ksoftirqd+0x5b/0x60
[  181.461872][    C2]  ? rcu_is_watching+0x12/0xc0
[  181.461895][    C2]  ? __pfx_run_ksoftirqd+0x10/0x10
[  181.461914][    C2]  run_ksoftirqd+0x38/0x60
[  181.461933][    C2]  smpboot_thread_fn+0x3d3/0xaa0
[  181.461961][    C2]  ? kthread+0x13a/0x450
[  181.461998][    C2]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  181.462025][    C2]  kthread+0x370/0x450
[  181.462045][    C2]  ? __pfx_kthread+0x10/0x10
[  181.462070][    C2]  ret_from_fork+0x72b/0xd50
[  181.462093][    C2]  ? __pfx_ret_from_fork+0x10/0x10
[  181.462115][    C2]  ? __switch_to+0x800/0x10f0
[  181.462144][    C2]  ? __pfx_kthread+0x10/0x10
[  181.462167][    C2]  ret_from_fork_asm+0x1a/0x30
[  181.462192][    C2]  </TASK>
[  181.464053][   T38] FAULT_INJECTION: forcing a failure.
[  181.464053][   T38] name failslab, interval 1, probability 10, space 0, times 22
[  181.465294][    C3] CPU: 3 UID: 0 PID: 5823 Comm: kworker/u32:3 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.465313][    C3] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.465317][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.465326][    C3] Workqueue: netns cleanup_net
[  181.465347][    C3] Call Trace:
[  181.465352][    C3]  <IRQ>
[  181.465356][    C3]  dump_stack_lvl+0x100/0x190
[  181.465371][    C3]  should_fail_ex.cold+0x5/0xa
[  181.465384][    C3]  should_failslab+0xc2/0x120
[  181.465400][    C3]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.465416][    C3]  ? __alloc_skb+0x140/0x710
[  181.465433][    C3]  __alloc_skb+0x140/0x710
[  181.465446][    C3]  ? __alloc_skb+0x5b7/0x710
[  181.465460][    C3]  ? __pfx___alloc_skb+0x10/0x10
[  181.465474][    C3]  ? lock_acquire+0x1b9/0x370
[  181.465495][    C3]  __netdev_alloc_skb+0x7a/0x960
[  181.465511][    C3]  __ieee80211_beacon_get+0xba1/0x1ee0
[  181.465529][    C3]  ? __lock_acquire+0x49f/0x1a40
[  181.465547][    C3]  ieee80211_beacon_get_tim+0xa6/0x280
[  181.465563][    C3]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  181.465584][    C3]  mac80211_hwsim_beacon_tx+0x4c7/0xa00
[  181.465605][    C3]  __iterate_interfaces+0x2e6/0x650
[  181.465619][    C3]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.465636][    C3]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.465652][    C3]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[  181.465669][    C3]  mac80211_hwsim_beacon+0xe5/0x2a0
[  181.465682][    C3]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.465695][    C3]  __hrtimer_run_queues+0x462/0x9c0
[  181.465714][    C3]  hrtimer_run_softirq+0x17d/0x2c0
[  181.465729][    C3]  handle_softirqs+0x1ea/0x9b0
[  181.465744][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  181.465756][    C3]  ? irqtime_account_delta+0x9a/0x110
[  181.465772][    C3]  ? __fib6_clean_all+0x10f/0x2d0
[  181.465784][    C3]  ? __pfx_fib6_ifdown+0x10/0x10
[  181.465799][    C3]  do_softirq+0xac/0xe0
[  181.465811][    C3]  </IRQ>
[  181.465815][    C3]  <TASK>
[  181.465819][    C3]  __local_bh_enable_ip+0xf8/0x120
[  181.465832][    C3]  __fib6_clean_all+0x10f/0x2d0
[  181.465846][    C3]  rt6_disable_ip+0x2a6/0x980
[  181.465865][    C3]  ? trace_contention_end+0x126/0x160
[  181.465883][    C3]  ? __pfx_rt6_disable_ip+0x10/0x10
[  181.465912][    C3]  addrconf_ifdown.isra.0+0x11d/0x1b70
[  181.465934][    C3]  ? trace_contention_end+0x126/0x160
[  181.465953][    C3]  ? __mutex_lock+0x26d/0x1bd0
[  181.465974][    C3]  ? tee_netdev_event+0x8a/0x3d0
[  181.465992][    C3]  ? find_held_lock+0x2b/0x80
[  181.466005][    C3]  ? __pfx_addrconf_ifdown.isra.0+0x10/0x10
[  181.466033][    C3]  addrconf_notify+0x4a3/0x1ba0
[  181.466059][    C3]  ? __pfx_tls_dev_event+0x10/0x10
[  181.466089][    C3]  ? __pfx_addrconf_notify+0x10/0x10
[  181.466106][    C3]  ? ip6mr_device_event+0x1c4/0x230
[  181.466123][    C3]  notifier_call_chain+0x99/0x3f0
[  181.466141][    C3]  call_netdevice_notifiers_info+0xbe/0x110
[  181.466161][    C3]  netif_close_many+0x319/0x630
[  181.466173][    C3]  ? __pfx_netif_close_many+0x10/0x10
[  181.466184][    C3]  ? cleanup_net+0x499/0x920
[  181.466211][    C3]  netif_close_many_and_unlock+0x24/0x270
[  181.466233][    C3]  unregister_netdevice_many_notify+0x661/0x2140
[  181.466261][    C3]  ? rcu_is_watching+0x12/0xc0
[  181.466278][    C3]  ? __mutex_lock+0x26d/0x1bd0
[  181.466293][    C3]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  181.466309][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  181.466323][    C3]  ? __pfx___mutex_lock+0x10/0x10
[  181.466340][    C3]  unregister_netdevice_queue+0x30b/0x3c0
[  181.466357][    C3]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  181.466377][    C3]  nsim_destroy+0x23e/0x970
[  181.466390][    C3]  ? nsim_dev_reload_destroy+0xf0/0x4a0
[  181.466405][    C3]  ? nsim_dev_reload_destroy+0x10a/0x4a0
[  181.466421][    C3]  __nsim_dev_port_del+0x194/0x2b0
[  181.466440][    C3]  nsim_dev_reload_destroy+0x10a/0x4a0
[  181.466458][    C3]  nsim_dev_reload_down+0x66/0xd0
[  181.466473][    C3]  devlink_reload+0x1ae/0x7a0
[  181.466492][    C3]  ? __pfx_devlink_reload+0x10/0x10
[  181.466512][    C3]  devlink_pernet_pre_exit+0x247/0x370
[  181.466527][    C3]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  181.466542][    C3]  ? iput+0x3a/0x40
[  181.466556][    C3]  ? sock_release+0x14d/0x1c0
[  181.466567][    C3]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  181.466584][    C3]  ops_undo_list+0x187/0xab0
[  181.466602][    C3]  ? __pfx_ops_undo_list+0x10/0x10
[  181.466617][    C3]  ? cleanup_net+0x332/0x920
[  181.466633][    C3]  ? cleanup_net+0x332/0x920
[  181.466649][    C3]  ? idr_destroy+0x62/0x2e0
[  181.466662][    C3]  cleanup_net+0x499/0x920
[  181.466680][    C3]  ? __pfx_cleanup_net+0x10/0x10
[  181.466698][    C3]  ? rcu_is_watching+0x12/0xc0
[  181.466713][    C3]  process_one_work+0xa23/0x1940
[  181.466735][    C3]  ? __pfx_process_one_work+0x10/0x10
[  181.466754][    C3]  ? __pfx_cleanup_net+0x10/0x10
[  181.466772][    C3]  worker_thread+0x5ef/0xe50
[  181.466792][    C3]  ? __pfx_worker_thread+0x10/0x10
[  181.466816][    C3]  ? kthread+0x13a/0x450
[  181.466838][    C3]  ? __pfx_worker_thread+0x10/0x10
[  181.466861][    C3]  kthread+0x370/0x450
[  181.466883][    C3]  ? __pfx_kthread+0x10/0x10
[  181.466907][    C3]  ret_from_fork+0x72b/0xd50
[  181.466927][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  181.466941][    C3]  ? __switch_to+0x800/0x10f0
[  181.466959][    C3]  ? __pfx_kthread+0x10/0x10
[  181.466983][    C3]  ret_from_fork_asm+0x1a/0x30
[  181.467019][    C3]  </TASK>
[  181.467883][    C3] FAULT_INJECTION: forcing a failure.
[  181.467883][    C3] name failslab, interval 1, probability 10, space 0, times 21
[  181.469994][ T5728] FAULT_INJECTION: forcing a failure.
[  181.469994][ T5728] name failslab, interval 1, probability 10, space 0, times 21
[  181.471090][    C3] CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.471107][    C3] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.471111][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.471118][    C3] Call Trace:
[  181.471123][    C3]  <TASK>
[  181.471128][    C3]  dump_stack_lvl+0x100/0x190
[  181.471144][    C3]  should_fail_ex.cold+0x5/0xa
[  181.471156][    C3]  should_failslab+0xc2/0x120
[  181.471172][    C3]  __kmalloc_noprof+0xfc/0x820
[  181.471187][    C3]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.471208][    C3]  ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.471228][    C3]  ? kasan_save_stack+0x3f/0x50
[  181.471242][    C3]  ? kasan_save_stack+0x30/0x50
[  181.471255][    C3]  ? __kasan_kmalloc+0xaa/0xb0
[  181.471267][    C3]  ? __kmalloc_noprof+0x322/0x820
[  181.471282][    C3]  ? lock_acquire+0x1b9/0x370
[  181.471300][    C3]  ? find_held_lock+0x2b/0x80
[  181.471313][    C3]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.471326][    C3]  ? __kfree_rcu_sheaf+0x195/0x730
[  181.471341][    C3]  ? __pfx_ieee802_11_parse_elems_full+0x10/0x10
[  181.471363][    C3]  ? kvfree_call_rcu+0x1be/0x4f0
[  181.471376][    C3]  ? __asan_memcpy+0x3c/0x60
[  181.471389][    C3]  ieee80211_inform_bss+0x159/0x1170
[  181.471409][    C3]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.471428][    C3]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.471445][    C3]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  181.471462][    C3]  cfg80211_inform_single_bss_data+0x898/0x1dc0
[  181.471482][    C3]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.471505][    C3]  ? mark_held_locks+0x40/0x70
[  181.471521][    C3]  ? find_held_lock+0x2b/0x80
[  181.471534][    C3]  ? ieee80211_rx_handlers+0xfcb/0xa740
[  181.471552][    C3]  ? ieee80211_rx_handlers+0xfcb/0xa740
[  181.471570][    C3]  ? rcu_is_watching+0x12/0xc0
[  181.471588][    C3]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.471603][    C3]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.471623][    C3]  ? __pfx_ieee80211_rx_handlers+0x10/0x10
[  181.471641][    C3]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.471658][    C3]  ? lock_acquire+0x1b9/0x370
[  181.471675][    C3]  ? find_held_lock+0x2b/0x80
[  181.471699][    C3]  ? __lock_acquire+0x49f/0x1a40
[  181.471721][    C3]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.471740][    C3]  ieee80211_bss_info_update+0x310/0xab0
[  181.471758][    C3]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.471779][    C3]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.471794][    C3]  ieee80211_scan_rx+0x4e6/0xb60
[  181.471810][    C3]  ? __lock_acquire+0x49f/0x1a40
[  181.471829][    C3]  __ieee80211_rx_handle_packet+0xbab/0xfc0
[  181.471843][    C3]  ? __pfx___ieee80211_rx_handle_packet+0x10/0x10
[  181.471855][    C3]  ? do_raw_spin_lock+0x128/0x260
[  181.471871][    C3]  ? lockdep_hardirqs_on+0x78/0x100
[  181.471884][    C3]  ? ieee80211_clean_skb+0x1a7/0x740
[  181.471902][    C3]  ieee80211_rx_list+0xf19/0x2160
[  181.471917][    C3]  ? lock_acquire+0x1b9/0x370
[  181.471933][    C3]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  181.471948][    C3]  ieee80211_rx_napi+0xdc/0x400
[  181.471959][    C3]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  181.471970][    C3]  ? lockdep_hardirqs_on+0x78/0x100
[  181.471995][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.472010][    C3]  ieee80211_handle_queued_frames+0xc8/0x120
[  181.472028][    C3]  tasklet_action_common+0x2de/0x3d0
[  181.472044][    C3]  handle_softirqs+0x1ea/0x9b0
[  181.472059][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  181.472074][    C3]  ? run_ksoftirqd+0x5b/0x60
[  181.472086][    C3]  ? rcu_is_watching+0x12/0xc0
[  181.472099][    C3]  ? __pfx_run_ksoftirqd+0x10/0x10
[  181.472111][    C3]  run_ksoftirqd+0x38/0x60
[  181.472122][    C3]  smpboot_thread_fn+0x3d3/0xaa0
[  181.472139][    C3]  ? kthread+0x13a/0x450
[  181.472153][    C3]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  181.472166][    C3]  kthread+0x370/0x450
[  181.472179][    C3]  ? __pfx_kthread+0x10/0x10
[  181.472195][    C3]  ret_from_fork+0x72b/0xd50
[  181.472210][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  181.472224][    C3]  ? __switch_to+0x800/0x10f0
[  181.472241][    C3]  ? __pfx_kthread+0x10/0x10
[  181.472257][    C3]  ret_from_fork_asm+0x1a/0x30
[  181.472278][    C3]  </TASK>
[  181.475116][   T38] CPU: 3 UID: 0 PID: 38 Comm: kworker/u33:1 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.475134][   T38] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.475138][   T38] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.475146][   T38] Workqueue: events_unbound cfg80211_wiphy_work
[  181.475166][   T38] Call Trace:
[  181.475170][   T38]  <TASK>
[  181.475174][   T38]  dump_stack_lvl+0x100/0x190
[  181.475189][   T38]  should_fail_ex.cold+0x5/0xa
[  181.475201][   T38]  should_failslab+0xc2/0x120
[  181.475217][   T38]  __kmalloc_noprof+0xfc/0x820
[  181.475231][   T38]  ? cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.475250][   T38]  cfg80211_inform_single_bss_data+0x557/0x1dc0
[  181.475266][   T38]  ? unwind_next_frame+0x3be/0x2090
[  181.475287][   T38]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  181.475302][   T38]  ? ret_from_fork_asm+0x1a/0x30
[  181.475326][   T38]  ? stack_trace_save+0x8e/0xc0
[  181.475342][   T38]  ? __pfx_stack_trace_save+0x10/0x10
[  181.475359][   T38]  ? cfg80211_inform_bss_data+0x230/0x3b60
[  181.475374][   T38]  cfg80211_inform_bss_data+0x230/0x3b60
[  181.475389][   T38]  ? __kmalloc_noprof+0x322/0x820
[  181.475401][   T38]  ? ieee802_11_parse_elems_full+0x17c/0x3bc0
[  181.475420][   T38]  ? cfg80211_wiphy_work+0x2b7/0x550
[  181.475434][   T38]  ? process_one_work+0xa23/0x1940
[  181.475450][   T38]  ? worker_thread+0x5ef/0xe50
[  181.475465][   T38]  ? kthread+0x370/0x450
[  181.475478][   T38]  ? ret_from_fork+0x72b/0xd50
[  181.475491][   T38]  ? ret_from_fork_asm+0x1a/0x30
[  181.475508][   T38]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  181.475526][   T38]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  181.475543][   T38]  ? _ieee802_11_parse_elems_full+0x687/0x5200
[  181.475563][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.475580][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.475602][   T38]  ? __lock_acquire+0x49f/0x1a40
[  181.475618][   T38]  ? find_held_lock+0x2b/0x80
[  181.475631][   T38]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.475648][   T38]  ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230
[  181.475668][   T38]  cfg80211_inform_bss_frame_data+0x245/0x7c0
[  181.475688][   T38]  ieee80211_bss_info_update+0x310/0xab0
[  181.475706][   T38]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  181.475726][   T38]  ? rcu_is_watching+0x12/0xc0
[  181.475739][   T38]  ? ieee80211_get_channel_khz+0x14a/0x1e0
[  181.475754][   T38]  ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70
[  181.475773][   T38]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  181.475796][   T38]  ieee80211_iface_work+0xa9a/0x1070
[  181.475816][   T38]  cfg80211_wiphy_work+0x2b7/0x550
[  181.475834][   T38]  process_one_work+0xa23/0x1940
[  181.475855][   T38]  ? __pfx_process_one_work+0x10/0x10
[  181.475874][   T38]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  181.475891][   T38]  worker_thread+0x5ef/0xe50
[  181.475911][   T38]  ? kthread+0x13a/0x450
[  181.475925][   T38]  ? __pfx_worker_thread+0x10/0x10
[  181.475939][   T38]  kthread+0x370/0x450
[  181.475953][   T38]  ? __pfx_kthread+0x10/0x10
[  181.475968][   T38]  ret_from_fork+0x72b/0xd50
[  181.475981][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  181.475995][   T38]  ? __switch_to+0x800/0x10f0
[  181.476011][   T38]  ? __pfx_kthread+0x10/0x10
[  181.476026][   T38]  ret_from_fork_asm+0x1a/0x30
[  181.476047][   T38]  </TASK>
[  181.476450][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.476466][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.476470][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.476477][  T821] Workqueue: events_unbound call_usermodehelper_exec_work
[  181.476496][  T821] Call Trace:
[  181.476499][  T821]  <TASK>
[  181.476503][  T821]  dump_stack_lvl+0x100/0x190
[  181.476515][  T821]  should_fail_ex.cold+0x5/0xa
[  181.476527][  T821]  should_failslab+0xc2/0x120
[  181.476542][  T821]  __kmalloc_noprof+0xfc/0x820
[  181.476555][  T821]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.476571][  T821]  ? lsm_blob_alloc+0x68/0x90
[  181.476590][  T821]  lsm_blob_alloc+0x68/0x90
[  181.476607][  T821]  security_prepare_creds+0x2d/0x290
[  181.476624][  T821]  prepare_creds+0x5d6/0x950
[  181.476642][  T821]  copy_creds+0xa7/0xa50
[  181.476660][  T821]  copy_process+0x1420/0x8030
[  181.476675][  T821]  ? _raw_spin_unlock+0x28/0x50
[  181.476686][  T821]  ? find_held_lock+0x2b/0x80
[  181.476704][  T821]  ? __pfx_copy_process+0x10/0x10
[  181.476720][  T821]  ? psi_group_change+0x457/0xa20
[  181.476736][  T821]  ? find_held_lock+0x2b/0x80
[  181.476774][  T821]  kernel_clone+0x176/0x9d0
[  181.476789][  T821]  ? __pfx_kernel_clone+0x10/0x10
[  181.476805][  T821]  ? look_up_lock_class+0x55/0x120
[  181.476821][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.476839][  T821]  user_mode_thread+0xcc/0x110
[  181.476852][  T821]  ? __pfx_user_mode_thread+0x10/0x10
[  181.476865][  T821]  ? find_held_lock+0x2b/0x80
[  181.476881][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.476900][  T821]  ? __pfx_kernel_sigaction+0x10/0x10
[  181.476919][  T821]  call_usermodehelper_exec_work+0x6b/0x180
[  181.476937][  T821]  process_one_work+0xa23/0x1940
[  181.476957][  T821]  ? __pfx_process_one_work+0x10/0x10
[  181.476976][  T821]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[  181.476996][  T821]  worker_thread+0x5ef/0xe50
[  181.477014][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.477034][  T821]  ? kthread+0x13a/0x450
[  181.477047][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.477061][  T821]  kthread+0x370/0x450
[  181.477080][  T821]  ? __pfx_kthread+0x10/0x10
[  181.477095][  T821]  ret_from_fork+0x72b/0xd50
[  181.477108][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  181.477122][  T821]  ? __switch_to+0x800/0x10f0
[  181.477139][  T821]  ? __pfx_kthread+0x10/0x10
[  181.477153][  T821]  ret_from_fork_asm+0x1a/0x30
[  181.477174][  T821]  </TASK>
[  181.478339][  T821] FAULT_INJECTION: forcing a failure.
[  181.478339][  T821] name failslab, interval 1, probability 10, space 0, times 18
[  181.479674][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.479691][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.479696][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.479704][ T5155] Call Trace:
[  181.479710][ T5155]  <TASK>
[  181.479717][ T5155]  dump_stack_lvl+0x100/0x190
[  181.479737][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.479755][ T5155]  should_failslab+0xc2/0x120
[  181.479780][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.479802][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.479828][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.479853][ T5155]  security_file_alloc+0x34/0x2c0
[  181.479871][ T5155]  init_file+0x95/0x480
[  181.479885][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.479899][ T5155]  path_openat+0xe7/0x4280
[  181.479910][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.479925][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.479937][ T5155]  ? do_getname+0x35/0x390
[  181.479949][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.479963][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.479976][ T5155]  ? do_syscall_64+0x115/0x840
[  181.479989][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.480004][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.480018][ T5155]  do_file_open+0x20e/0x430
[  181.480050][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.480071][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.480083][ T5155]  ? do_getname+0x191/0x390
[  181.480097][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.480112][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.480127][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.480144][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.480162][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.480177][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.480197][ T5155]  do_syscall_64+0x115/0x840
[  181.480209][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.480223][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.480235][ T5155] RIP: 0033:0x7f182a2a7407
[  181.480246][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.480257][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.480269][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.480275][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.480282][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.480289][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.480295][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.480309][ T5155]  </TASK>
[  181.480401][ T5155] FAULT_INJECTION: forcing a failure.
[  181.480401][ T5155] name failslab, interval 1, probability 10, space 0, times 16
[  181.488972][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.488990][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.488995][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.489004][  T821] Workqueue: events_unbound call_usermodehelper_exec_work
[  181.489037][  T821] Call Trace:
[  181.489042][  T821]  <TASK>
[  181.489047][  T821]  dump_stack_lvl+0x100/0x190
[  181.489062][  T821]  should_fail_ex.cold+0x5/0xa
[  181.489079][  T821]  should_failslab+0xc2/0x120
[  181.489095][  T821]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.489110][  T821]  ? alloc_vmap_area+0x182f/0x2bb0
[  181.489127][  T821]  alloc_vmap_area+0x182f/0x2bb0
[  181.489146][  T821]  ? kasan_save_track+0x14/0x30
[  181.489160][  T821]  ? __kasan_kmalloc+0xaa/0xb0
[  181.489173][  T821]  ? __pfx_alloc_vmap_area+0x10/0x10
[  181.489188][  T821]  ? __get_vm_area_node+0x101/0x330
[  181.489205][  T821]  __get_vm_area_node+0x1ca/0x330
[  181.489223][  T821]  __vmalloc_node_range_noprof+0x228/0x1630
[  181.489240][  T821]  ? kernel_clone+0x176/0x9d0
[  181.489258][  T821]  ? kernel_clone+0x176/0x9d0
[  181.489273][  T821]  ? __memcg_slab_post_alloc_hook+0x1bb/0x1160
[  181.489291][  T821]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.489311][  T821]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.489329][  T821]  ? kernel_clone+0x176/0x9d0
[  181.489341][  T821]  __vmalloc_node_noprof+0xad/0xf0
[  181.489357][  T821]  ? kernel_clone+0x176/0x9d0
[  181.489371][  T821]  copy_process+0x7fb/0x8030
[  181.489392][  T821]  ? __pfx_copy_process+0x10/0x10
[  181.489405][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.489423][  T821]  ? native_smp_send_reschedule+0x28/0x60
[  181.489442][  T821]  ? __resched_curr+0x2db/0x500
[  181.489456][  T821]  kernel_clone+0x176/0x9d0
[  181.489470][  T821]  ? __pfx_kernel_clone+0x10/0x10
[  181.489486][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.489511][  T821]  ? look_up_lock_class+0x55/0x120
[  181.489535][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.489562][  T821]  user_mode_thread+0xcc/0x110
[  181.489581][  T821]  ? __pfx_user_mode_thread+0x10/0x10
[  181.489594][  T821]  ? find_held_lock+0x2b/0x80
[  181.489610][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.489628][  T821]  ? __pfx_kernel_sigaction+0x10/0x10
[  181.489648][  T821]  call_usermodehelper_exec_work+0x6b/0x180
[  181.489666][  T821]  process_one_work+0xa23/0x1940
[  181.489687][  T821]  ? __pfx_process_one_work+0x10/0x10
[  181.489706][  T821]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[  181.489725][  T821]  worker_thread+0x5ef/0xe50
[  181.489744][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.489760][  T821]  ? kthread+0x13a/0x450
[  181.489774][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.489788][  T821]  kthread+0x370/0x450
[  181.489802][  T821]  ? __pfx_kthread+0x10/0x10
[  181.489817][  T821]  ret_from_fork+0x72b/0xd50
[  181.489831][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  181.489845][  T821]  ? __switch_to+0x800/0x10f0
[  181.489862][  T821]  ? __pfx_kthread+0x10/0x10
[  181.489877][  T821]  ret_from_fork_asm+0x1a/0x30
[  181.489898][  T821]  </TASK>
[  181.490145][  T821] ------------[ cut here ]------------
[  181.490787][ T5728] CPU: 2 UID: 0 PID: 5728 Comm: syz-executor Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.490805][ T5728] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.490809][ T5728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.490815][ T5728] Call Trace:
[  181.490819][ T5728]  <TASK>
[  181.490824][ T5728]  dump_stack_lvl+0x100/0x190
[  181.490838][ T5728]  should_fail_ex.cold+0x5/0xa
[  181.490851][ T5728]  should_failslab+0xc2/0x120
[  181.490866][ T5728]  __kmalloc_flags_noprof+0x122/0x8b0
[  181.490879][ T5728]  ? alloc_slab_obj_exts+0x5a/0x160
[  181.490892][ T5728]  alloc_slab_obj_exts+0x5a/0x160
[  181.490904][ T5728]  __memcg_slab_post_alloc_hook+0x3d4/0x1160
[  181.490926][ T5728]  ? kasan_save_track+0x14/0x30
[  181.490942][ T5728]  kmem_cache_alloc_noprof+0x587/0x6a0
[  181.490962][ T5728]  ? alloc_buffer_head+0x21/0x140
[  181.490986][ T5728]  alloc_buffer_head+0x21/0x140
[  181.491008][ T5728]  folio_alloc_buffers+0x194/0x8e0
[  181.491045][ T5728]  create_empty_buffers+0x3a/0x660
[  181.491070][ T5728]  ? __lock_acquire+0x49f/0x1a40
[  181.491087][ T5728]  ? jbd2_journal_stop+0x187/0xea0
[  181.491102][ T5728]  folio_create_buffers+0x13b/0x1a0
[  181.491118][ T5728]  __block_write_begin_int+0x393/0x19c0
[  181.491138][ T5728]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  181.491154][ T5728]  ? __pfx___block_write_begin_int+0x10/0x10
[  181.491171][ T5728]  ? __pfx___might_resched+0x10/0x10
[  181.491188][ T5728]  ? __mark_inode_dirty+0x55c/0x16e0
[  181.491205][ T5728]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[  181.491219][ T5728]  block_page_mkwrite+0x34d/0x460
[  181.491237][ T5728]  ext4_page_mkwrite+0xdee/0x1850
[  181.491257][ T5728]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  181.491277][ T5728]  do_page_mkwrite+0x17a/0x440
[  181.491293][ T5728]  ? __pfx_filemap_map_pages+0x10/0x10
[  181.491304][ T5728]  do_fault+0x3b5/0x1750
[  181.491322][ T5728]  __handle_mm_fault+0x187d/0x2a00
[  181.491336][ T5728]  ? reacquire_held_locks+0xce/0x1e0
[  181.491353][ T5728]  ? __pfx___handle_mm_fault+0x10/0x10
[  181.491367][ T5728]  ? lock_vma_under_rcu+0x17c/0x590
[  181.491385][ T5728]  handle_mm_fault+0x37b/0xa30
[  181.491399][ T5728]  do_user_addr_fault+0x5a3/0x12f0
[  181.491418][ T5728]  exc_page_fault+0x6f/0xd0
[  181.491432][ T5728]  asm_exc_page_fault+0x26/0x30
[  181.491443][ T5728] RIP: 0023:0xf70c92a6
[  181.491453][ T5728] Code: 8b b5 58 fe ff ff 8b bd 5c fe ff ff 0f ac d9 06 0f ac fe 03 89 cb bf 01 00 00 00 89 f1 81 e3 ff 3f 00 00 83 e1 07 d3 e7 89 f9 <08> 8c 03 20 20 00 00 39 95 54 fe ff ff 0f 85 35 fe ff ff 8b 85 3c
[  181.491464][ T5728] RSP: 002b:00000000ffc714c0 EFLAGS: 00010202
[  181.491473][ T5728] RAX: 00000000f509b000 RBX: 0000000000000fb0 RCX: 0000000000000008
[  181.491480][ T5728] RDX: 0000000057c9e468 RSI: 00000000f1767d83 RDI: 0000000000000008
[  181.491487][ T5728] RBP: 00000000ffc716c8 R08: 0000000000000000 R09: 0000000000000000
[  181.491493][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.491500][ T5728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.491513][ T5728]  </TASK>
[  181.492126][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.492152][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.492157][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.492166][ T5155] Call Trace:
[  181.492172][ T5155]  <TASK>
[  181.492181][ T5155]  dump_stack_lvl+0x100/0x190
[  181.492201][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.492214][ T5155]  should_failslab+0xc2/0x120
[  181.492229][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.492243][ T5155]  ? do_getname+0x35/0x390
[  181.492260][ T5155]  do_getname+0x35/0x390
[  181.492274][ T5155]  do_sys_openat2+0xc7/0x1e0
[  181.492289][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.492304][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.492321][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.492340][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.492357][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.492387][ T5155]  do_syscall_64+0x115/0x840
[  181.492406][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.492427][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.492444][ T5155] RIP: 0033:0x7f182a2a7407
[  181.492460][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.492477][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.492496][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.492508][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.492520][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.492531][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.492543][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.492570][ T5155]  </TASK>
[  181.492604][  T109] FAULT_INJECTION: forcing a failure.
[  181.492604][  T109] name failslab, interval 1, probability 10, space 0, times 7
[  181.492631][  T109] CPU: 0 UID: 0 PID: 109 Comm: kworker/u33:5 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.492655][  T109] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.492662][  T109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.492659][ T5155] FAULT_INJECTION: forcing a failure.
[  181.492659][ T5155] name failslab, interval 1, probability 10, space 0, times 7
[  181.492672][  T109] Workqueue: events_unbound nsim_dev_trap_report_work
[  181.492698][  T109] Call Trace:
[  181.492705][  T109]  <TASK>
[  181.492711][  T109]  dump_stack_lvl+0x100/0x190
[  181.492732][  T109]  should_fail_ex.cold+0x5/0xa
[  181.492776][  T109]  should_failslab+0xc2/0x120
[  181.492800][  T109]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.492823][  T109]  ? __alloc_skb+0x140/0x710
[  181.492849][  T109]  __alloc_skb+0x140/0x710
[  181.492869][  T109]  ? __alloc_skb+0x5b7/0x710
[  181.492887][  T109]  ? __pfx___alloc_skb+0x10/0x10
[  181.492911][  T109]  ? kfree_skbmem+0x19f/0x210
[  181.492931][  T109]  nsim_dev_trap_report_work+0x2af/0xd20
[  181.492968][  T109]  process_one_work+0xa23/0x1940
[  181.493004][  T109]  ? __pfx_process_one_work+0x10/0x10
[  181.493037][  T109]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  181.493070][  T109]  worker_thread+0x5ef/0xe50
[  181.493099][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.493124][  T109]  ? kthread+0x13a/0x450
[  181.493146][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.493170][  T109]  kthread+0x370/0x450
[  181.493192][  T109]  ? __pfx_kthread+0x10/0x10
[  181.493217][  T109]  ret_from_fork+0x72b/0xd50
[  181.493240][  T109]  ? __pfx_ret_from_fork+0x10/0x10
[  181.493263][  T109]  ? __switch_to+0x800/0x10f0
[  181.493291][  T109]  ? __pfx_kthread+0x10/0x10
[  181.493316][  T109]  ret_from_fork_asm+0x1a/0x30
[  181.493352][  T109]  </TASK>
[  181.493365][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.493389][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.493395][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.493405][ T5155] Call Trace:
[  181.493411][ T5155]  <TASK>
[  181.493418][ T5155]  dump_stack_lvl+0x100/0x190
[  181.493439][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.493459][ T5155]  should_failslab+0xc2/0x120
[  181.493482][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.493503][ T5155]  ? stack_trace_save+0x8e/0xc0
[  181.493527][ T5155]  ? alloc_empty_file+0x5b/0x1c0
[  181.493552][ T5155]  alloc_empty_file+0x5b/0x1c0
[  181.493575][ T5155]  path_openat+0xe7/0x4280
[  181.493594][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.493616][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.493637][ T5155]  ? do_getname+0x35/0x390
[  181.493657][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.493678][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.493698][ T5155]  ? do_syscall_64+0x115/0x840
[  181.493718][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.493742][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.493767][ T5155]  do_file_open+0x20e/0x430
[  181.493786][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.493821][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.493842][ T5155]  ? do_getname+0x191/0x390
[  181.493865][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.493884][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.493907][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.493933][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.493939][  T109] FAULT_INJECTION: forcing a failure.
[  181.493939][  T109] name failslab, interval 1, probability 10, space 0, times 5
[  181.493962][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.493987][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.494015][ T5155]  do_syscall_64+0x115/0x840
[  181.494039][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.494061][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.494076][ T5155] RIP: 0033:0x7f182a2a7407
[  181.494090][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.494123][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.494140][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.494151][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.494162][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.494172][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.494183][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.494207][ T5155]  </TASK>
[  181.494718][ T5155] FAULT_INJECTION: forcing a failure.
[  181.494718][ T5155] name failslab, interval 1, probability 10, space 0, times 4
[  181.494742][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.494764][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.494770][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.494780][ T5155] Call Trace:
[  181.494785][ T5155]  <TASK>
[  181.494792][ T5155]  dump_stack_lvl+0x100/0x190
[  181.494814][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.494833][ T5155]  should_failslab+0xc2/0x120
[  181.494858][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.494880][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.494903][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.494931][ T5155]  security_file_alloc+0x34/0x2c0
[  181.494954][ T5155]  init_file+0x95/0x480
[  181.494975][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.494998][ T5155]  path_openat+0xe7/0x4280
[  181.495015][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.495046][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.495066][ T5155]  ? do_getname+0x35/0x390
[  181.495085][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.495109][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.495130][ T5155]  ? do_syscall_64+0x115/0x840
[  181.495150][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.495175][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.495201][ T5155]  do_file_open+0x20e/0x430
[  181.495221][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.495256][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.495277][ T5155]  ? do_getname+0x191/0x390
[  181.495301][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.495325][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.495350][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.495377][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.495408][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.495457][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.495491][ T5155]  do_syscall_64+0x115/0x840
[  181.495512][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.495533][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.495552][ T5155] RIP: 0033:0x7f182a2a7407
[  181.495567][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.495583][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.495600][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.495611][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.495623][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.495634][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.495645][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.495669][ T5155]  </TASK>
[  181.496271][ T5155] FAULT_INJECTION: forcing a failure.
[  181.496271][ T5155] name failslab, interval 1, probability 10, space 0, times 3
[  181.496297][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.496320][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.496327][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.496337][ T5155] Call Trace:
[  181.496343][ T5155]  <TASK>
[  181.496350][ T5155]  dump_stack_lvl+0x100/0x190
[  181.496371][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.496391][ T5155]  should_failslab+0xc2/0x120
[  181.496416][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.496439][ T5155]  ? do_getname+0x35/0x390
[  181.496465][ T5155]  do_getname+0x35/0x390
[  181.496489][ T5155]  do_sys_openat2+0xc7/0x1e0
[  181.496513][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.496537][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.496563][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.496594][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.496618][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.496651][ T5155]  do_syscall_64+0x115/0x840
[  181.496672][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.496694][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.496712][ T5155] RIP: 0033:0x7f182a2a7407
[  181.496726][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.496771][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.496789][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.496801][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.496812][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.496823][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.496834][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.496858][ T5155]  </TASK>
[  181.497068][ T5155] FAULT_INJECTION: forcing a failure.
[  181.497068][ T5155] name failslab, interval 1, probability 10, space 0, times 2
[  181.497091][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.497114][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.497121][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.497130][ T5155] Call Trace:
[  181.497136][ T5155]  <TASK>
[  181.497143][ T5155]  dump_stack_lvl+0x100/0x190
[  181.497163][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.497183][ T5155]  should_failslab+0xc2/0x120
[  181.497207][ T5155]  kmem_cache_alloc_noprof+0x91/0x6a0
[  181.497230][ T5155]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.497253][ T5155]  ? security_file_alloc+0x34/0x2c0
[  181.497283][ T5155]  security_file_alloc+0x34/0x2c0
[  181.497308][ T5155]  init_file+0x95/0x480
[  181.497329][ T5155]  alloc_empty_file+0x79/0x1c0
[  181.497352][ T5155]  path_openat+0xe7/0x4280
[  181.497369][ T5155]  ? __kasan_slab_alloc+0x89/0x90
[  181.497391][ T5155]  ? kmem_cache_alloc_noprof+0x26b/0x6a0
[  181.497411][ T5155]  ? do_getname+0x35/0x390
[  181.497432][ T5155]  ? do_sys_openat2+0xc7/0x1e0
[  181.497452][ T5155]  ? __x64_sys_openat+0x12d/0x210
[  181.497474][ T5155]  ? do_syscall_64+0x115/0x840
[  181.497493][ T5155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.497519][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.497543][ T5155]  do_file_open+0x20e/0x430
[  181.497564][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.497600][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.497620][ T5155]  ? do_getname+0x191/0x390
[  181.497645][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.497668][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.497694][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.497720][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.497751][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.497775][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.497808][ T5155]  do_syscall_64+0x115/0x840
[  181.497828][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.497850][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.497868][ T5155] RIP: 0033:0x7f182a2a7407
[  181.497882][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.497899][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.497915][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.497927][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.497938][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.497949][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.497960][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.497984][ T5155]  </TASK>
[  181.498079][ T5155] FAULT_INJECTION: forcing a failure.
[  181.498079][ T5155] name failslab, interval 1, probability 10, space 0, times 1
[  181.498103][ T5155] CPU: 2 UID: 0 PID: 5155 Comm: udevd Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.498125][ T5155] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.498132][ T5155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.498142][ T5155] Call Trace:
[  181.498147][ T5155]  <TASK>
[  181.498154][ T5155]  dump_stack_lvl+0x100/0x190
[  181.498174][ T5155]  should_fail_ex.cold+0x5/0xa
[  181.498194][ T5155]  should_failslab+0xc2/0x120
[  181.498218][ T5155]  __kmalloc_noprof+0xfc/0x820
[  181.498238][ T5155]  ? rcu_is_watching+0x12/0xc0
[  181.498260][ T5155]  ? tomoyo_realpath_from_path+0xb6/0x690
[  181.498292][ T5155]  tomoyo_realpath_from_path+0xb6/0x690
[  181.498322][ T5155]  tomoyo_check_open_permission+0x2af/0x3c0
[  181.498346][ T5155]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  181.498377][ T5155]  ? hook_file_open+0x24f/0x8f0
[  181.498415][ T5155]  ? lock_acquire+0x1b9/0x370
[  181.498451][ T5155]  tomoyo_file_open+0x6b/0x90
[  181.498471][ T5155]  security_file_open+0xb5/0x1e0
[  181.498495][ T5155]  do_dentry_open+0x588/0x14d0
[  181.498520][ T5155]  vfs_open+0x82/0x3f0
[  181.498545][ T5155]  path_openat+0x2873/0x4280
[  181.498575][ T5155]  ? __pfx_path_openat+0x10/0x10
[  181.498600][ T5155]  do_file_open+0x20e/0x430
[  181.498622][ T5155]  ? __pfx_do_file_open+0x10/0x10
[  181.498658][ T5155]  ? alloc_fd+0x471/0x7a0
[  181.498679][ T5155]  ? do_getname+0x191/0x390
[  181.498703][ T5155]  do_sys_openat2+0x10f/0x1e0
[  181.498727][ T5155]  ? __pfx_do_sys_openat2+0x10/0x10
[  181.498752][ T5155]  ? ktime_get_ts64+0x318/0x420
[  181.498778][ T5155]  ? ktime_get_ts64+0x257/0x420
[  181.498810][ T5155]  __x64_sys_openat+0x12d/0x210
[  181.498835][ T5155]  ? __pfx___x64_sys_openat+0x10/0x10
[  181.498868][ T5155]  do_syscall_64+0x115/0x840
[  181.498888][ T5155]  ? clear_bhb_loop+0x40/0x90
[  181.498909][ T5155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.498927][ T5155] RIP: 0033:0x7f182a2a7407
[  181.498941][ T5155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  181.498957][ T5155] RSP: 002b:00007ffcd111b2e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  181.498972][ T5155] RAX: ffffffffffffffda RBX: 00007f182a9ab880 RCX: 00007f182a2a7407
[  181.498984][ T5155] RDX: 0000000000080141 RSI: 000056172415c02e RDI: ffffffffffffff9c
[  181.498995][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.499005][ T5155] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff
[  181.499016][ T5155] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000
[  181.499046][ T5155]  </TASK>
[  181.499106][  T821] ret
[  181.499114][  T821] WARNING: mm/vmalloc.c:1820 at alloc_vmap_area+0x17f6/0x2bb0, CPU#3: kworker/u33:7/821
[  181.499138][  T821] Modules linked in:
[  181.502610][  T109] CPU: 0 UID: 0 PID: 109 Comm: kworker/u33:5 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.502638][  T109] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.502645][  T109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.502657][  T109] Workqueue: events_unbound nsim_dev_trap_report_work
[  181.502684][  T109] Call Trace:
[  181.502691][  T109]  <TASK>
[  181.502698][  T109]  dump_stack_lvl+0x100/0x190
[  181.502720][  T109]  should_fail_ex.cold+0x5/0xa
[  181.502741][  T109]  should_failslab+0xc2/0x120
[  181.502766][  T109]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  181.502791][  T109]  ? __alloc_skb+0x140/0x710
[  181.502819][  T109]  __alloc_skb+0x140/0x710
[  181.502841][  T109]  ? __alloc_skb+0x5b7/0x710
[  181.502863][  T109]  ? __pfx___alloc_skb+0x10/0x10
[  181.502888][  T109]  ? kfree_skbmem+0x19f/0x210
[  181.502910][  T109]  nsim_dev_trap_report_work+0x2af/0xd20
[  181.502948][  T109]  process_one_work+0xa23/0x1940
[  181.502984][  T109]  ? __pfx_process_one_work+0x10/0x10
[  181.503016][  T109]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  181.503045][  T109]  worker_thread+0x5ef/0xe50
[  181.503075][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.503101][  T109]  ? kthread+0x13a/0x450
[  181.503123][  T109]  ? __pfx_worker_thread+0x10/0x10
[  181.503145][  T109]  kthread+0x370/0x450
[  181.503168][  T109]  ? __pfx_kthread+0x10/0x10
[  181.503193][  T109]  ret_from_fork+0x72b/0xd50
[  181.503216][  T109]  ? __pfx_ret_from_fork+0x10/0x10
[  181.503238][  T109]  ? __switch_to+0x800/0x10f0
[  181.503264][  T109]  ? __pfx_kthread+0x10/0x10
[  181.503289][  T109]  ret_from_fork_asm+0x1a/0x30
[  181.503326][  T109]  </TASK>
[  181.896178][ T5758] Bluetooth: hci0: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  181.899729][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  181.899751][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  181.899757][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  181.899766][  T821] Workqueue: events_unbound call_usermodehelper_exec_work
[  181.899792][  T821] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0
[  181.899810][  T821] Code: 48 8d 3d 8d d8 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 7b b0 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7
[  181.899822][  T821] RSP: 0018:ffffc90004627458 EFLAGS: 00010293
[  181.899832][  T821] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800
[  181.899840][  T821] RDX: ffff888025aa8000 RSI: ffffffff8266fbe5 RDI: ffffffff8e46c938
[  181.899848][  T821] RBP: ffffc90003389000 R08: 00000000ffffffff R09: fffffbfff1dbda96
[  181.899856][  T821] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000
[  181.899863][  T821] R13: ffffc90003399000 R14: ffffe8ffffffffff R15: 0000000000000000
[  181.899890][  T821] FS:  0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000
[  181.899917][  T821] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.899927][  T821] CR2: 00000000f7f3a190 CR3: 000000002228f000 CR4: 0000000000352ef0
[  181.899936][  T821] Call Trace:
[  181.899940][  T821]  <TASK>
[  181.899954][  T821]  ? kasan_save_track+0x14/0x30
[  181.899971][  T821]  ? __kasan_kmalloc+0xaa/0xb0
[  181.899985][  T821]  ? __pfx_alloc_vmap_area+0x10/0x10
[  181.900002][  T821]  ? __get_vm_area_node+0x101/0x330
[  181.900022][  T821]  __get_vm_area_node+0x1ca/0x330
[  181.900043][  T821]  __vmalloc_node_range_noprof+0x228/0x1630
[  181.900061][  T821]  ? kernel_clone+0x176/0x9d0
[  181.900083][  T821]  ? kernel_clone+0x176/0x9d0
[  181.900102][  T821]  ? __memcg_slab_post_alloc_hook+0x1bb/0x1160
[  181.900121][  T821]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  181.900144][  T821]  ? trace_kmem_cache_alloc+0xdd/0x100
[  181.900164][  T821]  ? kernel_clone+0x176/0x9d0
[  181.900177][  T821]  __vmalloc_node_noprof+0xad/0xf0
[  181.900195][  T821]  ? kernel_clone+0x176/0x9d0
[  181.900211][  T821]  copy_process+0x7fb/0x8030
[  181.900237][  T821]  ? __pfx_copy_process+0x10/0x10
[  181.900251][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.900271][  T821]  ? native_smp_send_reschedule+0x28/0x60
[  181.900291][  T821]  ? __resched_curr+0x2db/0x500
[  181.900309][  T821]  kernel_clone+0x176/0x9d0
[  181.900325][  T821]  ? __pfx_kernel_clone+0x10/0x10
[  181.900338][  T821]  ? __lock_acquire+0x49f/0x1a40
[  181.900360][  T821]  ? look_up_lock_class+0x55/0x120
[  181.900379][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.900399][  T821]  user_mode_thread+0xcc/0x110
[  181.900413][  T821]  ? __pfx_user_mode_thread+0x10/0x10
[  181.900427][  T821]  ? find_held_lock+0x2b/0x80
[  181.900447][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  181.900468][  T821]  ? __pfx_kernel_sigaction+0x10/0x10
[  181.900494][  T821]  call_usermodehelper_exec_work+0x6b/0x180
[  181.900517][  T821]  process_one_work+0xa23/0x1940
[  181.900543][  T821]  ? __pfx_process_one_work+0x10/0x10
[  181.900566][  T821]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[  181.900588][  T821]  worker_thread+0x5ef/0xe50
[  181.900610][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.900628][  T821]  ? kthread+0x13a/0x450
[  181.900642][  T821]  ? __pfx_worker_thread+0x10/0x10
[  181.900658][  T821]  kthread+0x370/0x450
[  181.900673][  T821]  ? __pfx_kthread+0x10/0x10
[  181.900690][  T821]  ret_from_fork+0x72b/0xd50
[  187.234734][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  187.236346][  T821]  ? __switch_to+0x800/0x10f0
[  187.237841][  T821]  ? __pfx_kthread+0x10/0x10
[  187.239299][  T821]  ret_from_fork_asm+0x1a/0x30
[  187.240835][  T821]  </TASK>
[  187.241824][  T821] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  187.244109][  T821] CPU: 3 UID: 0 PID: 821 Comm: kworker/u33:7 Tainted: G S                  syzkaller #0 PREEMPT(full) 
[  187.247475][  T821] Tainted: [S]=CPU_OUT_OF_SPEC
[  187.248970][  T821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  187.252093][  T821] Workqueue: events_unbound call_usermodehelper_exec_work
[  187.254311][  T821] Call Trace:
[  187.255397][  T821]  <TASK>
[  187.256337][  T821]  dump_stack_lvl+0x100/0x190
[  187.257831][  T821]  vpanic+0x552/0x970
[  187.259090][  T821]  ? __pfx_vpanic+0x10/0x10
[  187.260524][  T821]  panic+0xd1/0xe0
[  187.261719][  T821]  ? __pfx_panic+0x10/0x10
[  187.263129][  T821]  ? check_panic_on_warn+0x1f/0x90
[  187.264767][  T821]  check_panic_on_warn.cold+0x19/0x34
[  187.266444][  T821]  ? alloc_vmap_area+0x17f6/0x2bb0
[  187.268046][  T821]  __warn.cold+0x191/0x318
[  187.269502][  T821]  __report_bug+0x30f/0x440
[  187.270943][  T821]  ? alloc_vmap_area+0x17f6/0x2bb0
[  187.272551][  T821]  ? __pfx___report_bug+0x10/0x10
[  187.274152][  T821]  ? alloc_vmap_area+0x17f6/0x2bb0
[  187.275758][  T821]  report_bug+0xb2/0x220
[  187.277191][  T821]  ? alloc_vmap_area+0x17f6/0x2bb0
[  187.278801][  T821]  handle_bug+0x16a/0x2a0
[  187.280165][  T821]  exc_invalid_op+0x17/0x50
[  187.281611][  T821]  asm_exc_invalid_op+0x1a/0x20
[  187.283138][  T821] RIP: 0010:alloc_vmap_area+0x17f6/0x2bb0
[  187.284977][  T821] Code: 48 8d 3d 8d d8 c0 0e 8b 74 24 10 67 48 0f b9 3a c7 44 24 70 00 00 00 00 e9 95 ed ff ff 48 c7 c3 ea ff ff ff e8 7b b0 a2 ff 90 <0f> 0b 90 41 be 01 00 00 00 e9 ae f9 ff ff 41 be 01 00 00 00 48 c7
[  187.290859][  T821] RSP: 0018:ffffc90004627458 EFLAGS: 00010293
[  187.292773][  T821] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: 0000000000002800
[  187.295259][  T821] RDX: ffff888025aa8000 RSI: ffffffff8266fbe5 RDI: ffffffff8e46c938
[  187.297728][  T821] RBP: ffffc90003389000 R08: 00000000ffffffff R09: fffffbfff1dbda96
[  187.300115][  T821] R10: ffffffff8eded4b3 R11: 0000000000000000 R12: 0000000000000000
[  187.302471][  T821] R13: ffffc90003399000 R14: ffffe8ffffffffff R15: 0000000000000000
[  187.304993][  T821]  ? alloc_vmap_area+0x17f5/0x2bb0
[  187.306620][  T821]  ? alloc_vmap_area+0x17f5/0x2bb0
[  187.308236][  T821]  ? kasan_save_track+0x14/0x30
[  187.309804][  T821]  ? __kasan_kmalloc+0xaa/0xb0
[  187.311316][  T821]  ? __pfx_alloc_vmap_area+0x10/0x10
[  187.312929][  T821]  ? __get_vm_area_node+0x101/0x330
[  187.314588][  T821]  __get_vm_area_node+0x1ca/0x330
[  187.316187][  T821]  __vmalloc_node_range_noprof+0x228/0x1630
[  187.318057][  T821]  ? kernel_clone+0x176/0x9d0
[  187.319560][  T821]  ? kernel_clone+0x176/0x9d0
[  187.321064][  T821]  ? __memcg_slab_post_alloc_hook+0x1bb/0x1160
[  187.323027][  T821]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  187.325022][  T821]  ? trace_kmem_cache_alloc+0xdd/0x100
[  187.326745][  T821]  ? kernel_clone+0x176/0x9d0
[  187.328226][  T821]  __vmalloc_node_noprof+0xad/0xf0
[  187.329857][  T821]  ? kernel_clone+0x176/0x9d0
[  187.331364][  T821]  copy_process+0x7fb/0x8030
[  187.332854][  T821]  ? __pfx_copy_process+0x10/0x10
[  187.334448][  T821]  ? __lock_acquire+0x49f/0x1a40
[  187.336018][  T821]  ? native_smp_send_reschedule+0x28/0x60
[  187.337831][  T821]  ? __resched_curr+0x2db/0x500
[  187.339306][  T821]  kernel_clone+0x176/0x9d0
[  187.340738][  T821]  ? __pfx_kernel_clone+0x10/0x10
[  187.342249][  T821]  ? __lock_acquire+0x49f/0x1a40
[  187.343816][  T821]  ? look_up_lock_class+0x55/0x120
[  187.345463][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  187.347538][  T821]  user_mode_thread+0xcc/0x110
[  187.349041][  T821]  ? __pfx_user_mode_thread+0x10/0x10
[  187.350744][  T821]  ? find_held_lock+0x2b/0x80
[  187.352231][  T821]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  187.354309][  T821]  ? __pfx_kernel_sigaction+0x10/0x10
[  187.356004][  T821]  call_usermodehelper_exec_work+0x6b/0x180
[  187.357871][  T821]  process_one_work+0xa23/0x1940
[  187.359448][  T821]  ? __pfx_process_one_work+0x10/0x10
[  187.361145][  T821]  ? __pfx_call_usermodehelper_exec_work+0x10/0x10
[  187.363170][  T821]  worker_thread+0x5ef/0xe50
[  187.364655][  T821]  ? __pfx_worker_thread+0x10/0x10
[  187.366300][  T821]  ? kthread+0x13a/0x450
[  187.367734][  T821]  ? __pfx_worker_thread+0x10/0x10
[  187.369381][  T821]  kthread+0x370/0x450
[  187.370696][  T821]  ? __pfx_kthread+0x10/0x10
[  187.372159][  T821]  ret_from_fork+0x72b/0xd50
[  187.373632][  T821]  ? __pfx_ret_from_fork+0x10/0x10
[  187.375249][  T821]  ? __switch_to+0x800/0x10f0
[  187.376758][  T821]  ? __pfx_kthread+0x10/0x10
[  187.378237][  T821]  ret_from_fork_asm+0x1a/0x30
[  187.379767][  T821]  </TASK>
[  187.381440][  T821] Kernel Offset: disabled
[  187.382803][  T821] Rebooting in 86400 seconds..