last executing test programs: 1m23.103746402s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0,65536', 0x10) r1 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 1m22.81638817s ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r0, &(0x7f0000001400)='2\n', 0x2) 1m22.816125682s ago: executing program 1 (id=159): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x0, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0"}}, 0x14d) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) read(r0, &(0x7f0000001000)=""/4380, 0x111c) write$UHID_INPUT2(r0, &(0x7f0000002000)={0xa, {0x1, '\x00'}}, 0x7) write$UHID_INPUT2(r0, &(0x7f0000003000)={0xa, {0x2, '\x00\x00'}}, 0x8) write$UHID_INPUT2(r0, &(0x7f0000004000)={0xa, {0x3, '\x00\x00\x00'}}, 0x9) 1m21.904927224s ago: executing program 1 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='256\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='64\n\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100") 1m21.904628635s ago: executing program 1 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tmp\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tmp/file1\x00', 0x42, 0x1ff) ftruncate(r0, 0x1f400000) 1m21.846309843s ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\n\x00', 0x5) 1m15.587156798s ago: executing program 32 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='core', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ed) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1 1 1 1', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='disk\n', 0x5) 1m13.894484035s ago: executing program 4 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r0, &(0x7f0000001400)='2\n', 0x2) 1m13.775289564s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='disk\n', 0x5) 1m8.106535876s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(r0, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 1m8.106277422s ago: executing program 0 (id=209): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001080), 0x2) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000020c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000002100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000002140), 0x2) read(r0, &(0x7f0000002180)=""/4096, 0x1000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000003180)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000031c0), 0x2) 1m7.906056611s ago: executing program 2 (id=210): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r1 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 1m7.65632694s ago: executing program 2 (id=211): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) (async) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) 1m6.64356926s ago: executing program 33 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='disk\n\x00', 0x5) 1m6.320310981s ago: executing program 0 (id=213): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) 1m5.474534163s ago: executing program 5 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000001400)='2\n', 0x2) 1m5.396485494s ago: executing program 5 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='v4,tcp,port=2049\x00') 1m5.31613158s ago: executing program 0 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m4.785779285s ago: executing program 0 (id=216): r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="6c6170623000000000000000000000000100"/40) syz_emit_ethernet(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000060000200032f00"/60], &(0x7f0000000300)) syz_emit_ethernet(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff00000000000060000200030100"/60], &(0x7f0000000300)) 1m4.726676735s ago: executing program 0 (id=217): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1m4.626145547s ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(r0, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) 1m4.625723176s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r1 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 1m4.346366509s ago: executing program 2 (id=220): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x100000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) fallocate(r4, 0x0, 0x0, 0x100000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x42, 0x1ff) fallocate(r5, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) ioctl$LOOP_SET_FD(r2, 0x4c00, r5) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./my_md_device\x00', 0x81b6, 0x900) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./my_md_device\x00', 0x2, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000300)="000000005a00000003000000000000000500000000100000030000000300000000000000010000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r6, 0x40140921, &(0x7f0000000380)="0000000007000000000000000000000006000000") ioctl(r6, 0x40140921, &(0x7f00000003c0)="0100000007000000010000000100000006000000") ioctl(r6, 0x40140921, &(0x7f0000000400)="0200000007000000020000000200000006000000") ioctl(r6, 0x400c0930, &(0x7f0000000440)='\x00'/12) pwrite64(r6, &(0x7f0000000500)='A', 0x1000, 0x0) fsync(r6) 1m4.346122991s ago: executing program 2 (id=221): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) r1 = socket(0x1f, 0x5, 0x7) setsockopt(r1, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) 44.277261411s ago: executing program 34 (id=217): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040641122060000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 44.225097517s ago: executing program 35 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='v4,tcp,port=2049\x00') 44.191141742s ago: executing program 36 (id=221): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) r1 = socket(0x1f, 0x5, 0x7) setsockopt(r1, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) connect(r1, &(0x7f0000000200)=@generic={0x1f, "0000000000000100"}, 0xa) 44.16377965s ago: executing program 37 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='disk\n', 0x5) 39.387661733s ago: executing program 7 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk', 0x3) 23.943399412s ago: executing program 38 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='core\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='disk', 0x3) 16.342907317s ago: executing program 8 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='256\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='64\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100") 16.28560434s ago: executing program 8 (id=385): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000304), 0x2) read(r0, &(0x7f0000000200)=""/1, 0x1) 14.406209387s ago: executing program 8 (id=390): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000314010000000000000000000900020073797a3000000000080041007369770018003300766574683000"/58], 0x3c}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 13.562466466s ago: executing program 8 (id=395): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r0, 0x8983, &(0x7f0000000040)="000000006574683000000000000000000000000000000000000300"/52) ioctl(r0, 0x8983, &(0x7f0000000080)="01000000657468302e3000"/52) 12.50391715s ago: executing program 8 (id=396): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x2}}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='mem\x00', 0x4) 12.502507389s ago: executing program 8 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk\n', 0x5) 3.421964758s ago: executing program 9 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') write(0xffffffffffffffff, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.845982389s ago: executing program 9 (id=446): syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301008032080b0003010020000904000000010120000a2401000a00000000000904010000010220000904010101010220000905010900020100000a2501000000000000000904020000010220000904020101010220000905820900020100000a250100000000000000"], 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.226264069s ago: executing program 6 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) 2.22609067s ago: executing program 6 (id=455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getsa={0x2c, 0x12, 0x1, 0x0, 0x0, {@in6=@empty}}, 0x2c}}, 0x0) 2.145547996s ago: executing program 6 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) pwrite64(r3, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") 2.096167326s ago: executing program 6 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.541520956s ago: executing program 6 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000002000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100d)={0x2, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100e)={0x2, 0x47}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100f)={0x2, 0x7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001011)={0x2, 0xaa}, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) write(r1, &(0x7f0000005100)='bare\x00', 0x4) 1.49557161s ago: executing program 6 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async) nanosleep(&(0x7f0000000480)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='1', 0x1) nanosleep(&(0x7f0000000680)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f00000007c0)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000880)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) 1.155517221s ago: executing program 3 (id=463): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.155348616s ago: executing program 3 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) timerfd_create(0x9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='freeze\n', 0x7) 1.092600729s ago: executing program 3 (id=465): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100727865001400330073797a3000"/56], 0x38}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/infiniband/rxe0\x00', 0x2, 0x0) 795.259954ms ago: executing program 3 (id=466): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r1 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 676.276902ms ago: executing program 9 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) pwrite64(r3, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") 615.653398ms ago: executing program 9 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 556.361238ms ago: executing program 3 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000002000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100d)={0x2, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100e)={0x2, 0x47}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000100f)={0x2, 0x7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001011)={0x2, 0xaa}, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) write(r1, &(0x7f0000005100)='bare\x00', 0x4) 495.355098ms ago: executing program 3 (id=470): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x4}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x5}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x6}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x7}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x8}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x9}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0xa}}) 75.838869ms ago: executing program 9 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_nullb\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/my_nullb/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/my_nullb\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000002000)=[{&(0x7f0000001000)='SFOZ', 0x4}, {&(0x7f0000003000)='\x00'/4092, 0xffc}], 0x2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000c00)=@filename='./dev/my_nullb\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0) 0s ago: executing program 9 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902240001010080fa0904000002ffffff00090502020002000000090586020002000000"], &(0x7f0000000500)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}}) syz_usb_ep_write(r0, 0x86, 0x20, &(0x7f0000000200)="1234567812345678123456781234567812345678123456781234567812345678") syz_usb_ep_write(r0, 0x86, 0x20, &(0x7f0000000200)="1234567812345678123456781234567812345678123456781234567812345678") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem\x00', 0x4) 0s ago: executing program 3 (id=473): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x0, &(0x7f0000000300)={&(0x7f0000001000)='\x00'/4096, 0x1000, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25023' (ED25519) to the list of known hosts. [ 41.346447][ T5724] cgroup: Unknown subsys name 'net' [ 41.521443][ T5724] cgroup: Unknown subsys name 'cpuset' [ 41.526535][ T5724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.488790][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.528313][ T5752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.530851][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.533056][ T5752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.535560][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.535862][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.537361][ T5752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.537431][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.538488][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.539183][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.540301][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.541308][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.542237][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.542846][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.543889][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.544522][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.544726][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.545832][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.545886][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.546410][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.548206][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.118874][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.122635][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.125737][ T5749] bridge_slave_0: entered allmulticast mode [ 47.129989][ T5749] bridge_slave_0: entered promiscuous mode [ 47.160256][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.162601][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.164953][ T5749] bridge_slave_1: entered allmulticast mode [ 47.167817][ T5749] bridge_slave_1: entered promiscuous mode [ 47.275131][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.300212][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.326934][ T5749] team0: Port device team_slave_0 added [ 47.335553][ T5749] team0: Port device team_slave_1 added [ 47.343716][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.346598][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.349487][ T5740] bridge_slave_0: entered allmulticast mode [ 47.353074][ T5740] bridge_slave_0: entered promiscuous mode [ 47.358117][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.361729][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.364564][ T5746] bridge_slave_0: entered allmulticast mode [ 47.368462][ T5746] bridge_slave_0: entered promiscuous mode [ 47.372875][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.375719][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.379819][ T5746] bridge_slave_1: entered allmulticast mode [ 47.383203][ T5746] bridge_slave_1: entered promiscuous mode [ 47.405621][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.408532][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.411330][ T5739] bridge_slave_0: entered allmulticast mode [ 47.414883][ T5739] bridge_slave_0: entered promiscuous mode [ 47.419972][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.423614][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.426896][ T5740] bridge_slave_1: entered allmulticast mode [ 47.430690][ T5740] bridge_slave_1: entered promiscuous mode [ 47.443210][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.445936][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.455665][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.461341][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.464950][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.468638][ T5739] bridge_slave_1: entered allmulticast mode [ 47.472331][ T5739] bridge_slave_1: entered promiscuous mode [ 47.507452][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.510833][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.520645][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.548577][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.554585][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.559648][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.564620][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.571097][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.605473][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.634870][ T5746] team0: Port device team_slave_0 added [ 47.640173][ T5749] hsr_slave_0: entered promiscuous mode [ 47.642864][ T5749] hsr_slave_1: entered promiscuous mode [ 47.656476][ T5739] team0: Port device team_slave_0 added [ 47.660004][ T5746] team0: Port device team_slave_1 added [ 47.669402][ T5740] team0: Port device team_slave_0 added [ 47.672724][ T5739] team0: Port device team_slave_1 added [ 47.694203][ T5740] team0: Port device team_slave_1 added [ 47.709356][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.711769][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.719952][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.742828][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.745727][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.754718][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.759307][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.761410][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.768916][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.782853][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.785311][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.794299][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.806361][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.808774][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.816709][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.824118][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.826933][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.837416][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.902831][ T5746] hsr_slave_0: entered promiscuous mode [ 47.905042][ T5746] hsr_slave_1: entered promiscuous mode [ 47.907909][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 47.909791][ T5746] Cannot create hsr debugfs directory [ 47.930503][ T5740] hsr_slave_0: entered promiscuous mode [ 47.933987][ T5740] hsr_slave_1: entered promiscuous mode [ 47.936063][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 47.938017][ T5740] Cannot create hsr debugfs directory [ 47.944313][ T5739] hsr_slave_0: entered promiscuous mode [ 47.946771][ T5739] hsr_slave_1: entered promiscuous mode [ 47.948851][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.950668][ T5739] Cannot create hsr debugfs directory [ 48.193847][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.202208][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.212998][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.218255][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.234834][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.240702][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.243581][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.251322][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.280510][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.286042][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.294983][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.300433][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.303318][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.308309][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.311956][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.318125][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.369401][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.375903][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.378993][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.383580][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.387173][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.391360][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.394605][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.401197][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.482200][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.489115][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.495858][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.501664][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.505137][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.510178][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.513742][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.518573][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.573777][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.587193][ T5745] Bluetooth: hci2: command tx timeout [ 48.587202][ T5752] Bluetooth: hci0: command tx timeout [ 48.596652][ T5752] Bluetooth: hci1: command tx timeout [ 48.607545][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.615039][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.632903][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.638324][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.640903][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.658419][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.661351][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.666281][ T5752] Bluetooth: hci3: command tx timeout [ 48.666792][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.672827][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.674980][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.687297][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.689916][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.715476][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.726643][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.730702][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.733023][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.759676][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.761916][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.782949][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.804982][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.807624][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.815037][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.830728][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.833397][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.150301][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.155341][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.169192][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.177997][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.231562][ T5749] veth0_vlan: entered promiscuous mode [ 49.247078][ T5749] veth1_vlan: entered promiscuous mode [ 49.254031][ T5740] veth0_vlan: entered promiscuous mode [ 49.257337][ T5746] veth0_vlan: entered promiscuous mode [ 49.260891][ T5739] veth0_vlan: entered promiscuous mode [ 49.272886][ T5740] veth1_vlan: entered promiscuous mode [ 49.278540][ T5739] veth1_vlan: entered promiscuous mode [ 49.284703][ T5746] veth1_vlan: entered promiscuous mode [ 49.317551][ T5749] veth0_macvtap: entered promiscuous mode [ 49.330635][ T5749] veth1_macvtap: entered promiscuous mode [ 49.350023][ T5746] veth0_macvtap: entered promiscuous mode [ 49.353152][ T5740] veth0_macvtap: entered promiscuous mode [ 49.357982][ T5739] veth0_macvtap: entered promiscuous mode [ 49.364752][ T5740] veth1_macvtap: entered promiscuous mode [ 49.368062][ T5746] veth1_macvtap: entered promiscuous mode [ 49.370875][ T5739] veth1_macvtap: entered promiscuous mode [ 49.384160][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.395602][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.400989][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.414550][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.419458][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.425030][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.430158][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.444628][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.543791][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.547529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.567675][ T345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.570745][ T345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.576573][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.581322][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.585273][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.609244][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.613189][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.659803][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.663540][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.669253][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.673607][ T345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.675996][ T345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.687309][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.693062][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.703099][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.714846][ T345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.717215][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.718204][ T345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.722205][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.754341][ T345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.768427][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.770238][ T345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.777568][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807465][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812914][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.846800][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.852661][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860499][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.868543][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.871800][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901461][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.911583][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.913865][ T5900] misc userio: No port type given on /dev/userio [ 49.918211][ T5900] misc userio: The device must be registered before sending interrupts [ 49.921539][ T5900] misc userio: The device must be registered before sending interrupts [ 49.924574][ T5900] misc userio: The device must be registered before sending interrupts [ 49.928103][ T5900] misc userio: The device must be registered before sending interrupts [ 49.930862][ T5900] misc userio: The device must be registered before sending interrupts [ 49.935186][ T5898] null_blk: nullb1: using native zone append [ 49.938092][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943892][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.948972][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.950839][ T5900] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 49.959879][ T42] audit: type=1800 audit(1785857097.770:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="zoned" dev="configfs" ino=8687 res=0 errno=0 [ 49.969597][ T42] audit: type=1800 audit(1785857097.780:3): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5" name="zone_nr_conv" dev="configfs" ino=9480 res=0 errno=0 [ 50.032012][ T5898] null_blk: disk nullb1 created [ 50.127952][ T5916] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 50.206171][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.231768][ T5910] UBIFS error (pid: 5910): cannot open "ubi0_0", error -19 [ 50.293165][ T42] audit: type=1800 audit(1785857098.100:4): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="idVendor" dev="configfs" ino=10460 res=0 errno=0 [ 50.301257][ T42] audit: type=1800 audit(1785857098.100:5): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="idProduct" dev="configfs" ino=10461 res=0 errno=0 [ 50.308323][ T42] audit: type=1800 audit(1785857098.110:6): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="process_ump" dev="configfs" ino=10467 res=0 errno=0 [ 50.315497][ T42] audit: type=1800 audit(1785857098.110:7): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="direction" dev="configfs" ino=10468 res=0 errno=0 [ 50.326923][ T42] audit: type=1800 audit(1785857098.110:8): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="active" dev="configfs" ino=10469 res=0 errno=0 [ 50.333527][ T42] audit: type=1800 audit(1785857098.110:9): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="direction" dev="configfs" ino=10472 res=0 errno=0 [ 50.342243][ T42] audit: type=1800 audit(1785857098.120:10): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="active" dev="configfs" ino=8701 res=0 errno=0 [ 50.348790][ T42] audit: type=1800 audit(1785857098.120:11): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="UDC" dev="configfs" ino=8703 res=0 errno=0 [ 50.362848][ T5853] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 50.368289][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.398716][ T5853] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 50.401614][ T5853] usb 6-1: setting power ON [ 50.407249][ T5924] NFSD: Failed to start, no listeners configured. [ 50.626310][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.666567][ T5752] Bluetooth: hci2: command tx timeout [ 50.666869][ T5745] Bluetooth: hci1: command tx timeout [ 50.667117][ T5754] Bluetooth: hci0: command tx timeout [ 50.746555][ T5745] Bluetooth: hci3: command tx timeout [ 50.776942][ T5848] usb 5-1: Dual-Role OTG device on HNP port [ 50.779182][ T5848] usb 5-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 7.02 [ 50.782099][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.791710][ T5848] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.799282][ T5848] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 50.807400][ T5848] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 50.809793][ T5848] usb 5-1: invalid MIDI out EP 0 [ 50.887451][ T5848] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 50.970347][ T5942] misc userio: No port type given on /dev/userio [ 50.972550][ T5942] misc userio: The device must be registered before sending interrupts [ 50.975511][ T5942] misc userio: The device must be registered before sending interrupts [ 50.978526][ T5942] misc userio: The device must be registered before sending interrupts [ 50.981640][ T5942] misc userio: The device must be registered before sending interrupts [ 50.984373][ T5942] misc userio: The device must be registered before sending interrupts [ 50.992548][ T5942] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 50.999223][ T5945] nvmet: adding nsid 1 to subsystem testnqn [ 51.080223][ T60] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:26bc38a7-9c98-4f09-9870-07ba1e264b64. [ 51.090757][ T5945] nvme nvme0: creating 4 I/O queues. [ 51.100372][ T5945] nvme nvme0: new ctrl: "testnqn" [ 51.335658][ T5951] UBIFS error (pid: 5951): cannot open "ubi0_0", error -19 [ 51.388620][ T5956] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 52.029239][ T5975] misc userio: No port type given on /dev/userio [ 52.031799][ T5975] misc userio: The device must be registered before sending interrupts [ 52.034953][ T5975] misc userio: The device must be registered before sending interrupts [ 52.039134][ T5975] misc userio: The device must be registered before sending interrupts [ 52.042763][ T5975] misc userio: The device must be registered before sending interrupts [ 52.046436][ T5931] NFSD: Unable to initialize client recovery tracking! (-110) [ 52.046476][ T5931] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 52.052743][ T5975] misc userio: The device must be registered before sending interrupts [ 52.053923][ T5931] NFSD: starting 10-second grace period (net f0000425) [ 52.068960][ T5975] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 52.144849][ T5973] UBIFS error (pid: 5973): cannot open "ubi0_0", error -19 [ 52.428658][ T5853] dvb-usb: bulk message failed: -110 (2/0) [ 52.437352][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 52.441138][ T5853] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 52.444289][ T5853] usb 6-1: media controller created [ 52.451754][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 52.462991][ T5853] usb 6-1: selecting invalid altsetting 6 [ 52.465230][ T5853] usb 6-1: digital interface selection failed (-22) [ 52.467648][ T5853] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 52.468062][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.472013][ T5853] usb 6-1: setting power OFF [ 52.620270][ T5997] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 52.642047][ T5892] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 52.647978][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.673853][ T5892] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 52.746250][ T5745] Bluetooth: hci2: command tx timeout [ 52.747400][ T5752] Bluetooth: hci0: command tx timeout [ 52.747448][ T5754] Bluetooth: hci1: command tx timeout [ 52.826188][ T5752] Bluetooth: hci3: command tx timeout [ 52.914744][ T6001] UBIFS error (pid: 6001): cannot open "ubi0_0", error -19 [ 53.096916][ T6018] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 53.172119][ T6023] loop0: detected capacity change from 0 to 8065 [ 53.183619][ T6023] loop1: detected capacity change from 0 to 8065 [ 53.208130][ T5853] dvb-usb: bulk message failed: -71 (2/0) [ 53.211750][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 53.222767][ T5853] usb 6-1: setting power ON [ 53.230621][ T5853] dvb-usb: bulk message failed: -71 (2/0) [ 53.231853][ T6023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.241697][ T5853] usb 6-1: analog interface selection failed (-71) [ 53.267046][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 53.270226][ T5853] dvb_usb_cxusb 6-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 53.279011][ T5853] usb 6-1: USB disconnect, device number 2 [ 53.297324][ T6023] md: invalid raid superblock magic on loop0 [ 53.302956][ T6023] md: loop0 does not have a valid v0.90 superblock, not importing! [ 53.368390][ T6032] md: invalid raid superblock magic on loop1 [ 53.371807][ T6032] md: loop1 does not have a valid v0.90 superblock, not importing! [ 53.455540][ T6027] UBIFS error (pid: 6027): cannot open "ubi0_0", error -19 [ 53.484397][ T6046] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 53.521031][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.536176][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.903226][ T6070] UBIFS error (pid: 6070): cannot open "ubi0_0", error -19 [ 54.055948][ T6079] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 146.919867][ T7703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.922341][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.3.473 Not tainted syzkaller #0 PREEMPT(full) [ 146.925691][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.929267][ T7703] Call Trace: [ 146.930406][ T7703] [ 146.931325][ T7703] dump_stack_lvl+0x100/0x190 [ 146.932741][ T7703] vpanic+0x552/0x970 [ 146.933965][ T7703] ? __pfx_vpanic+0x10/0x10 [ 146.935370][ T7703] panic+0xd1/0xe0 [ 146.936469][ T7703] ? __pfx_panic+0x10/0x10 [ 146.937831][ T7703] check_panic_on_warn.cold+0x19/0x34 [ 146.939410][ T7703] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 146.941098][ T7703] __warn.cold+0x191/0x318 [ 146.942426][ T7703] __report_bug+0x30f/0x440 [ 146.943760][ T7703] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 146.945466][ T7703] ? __pfx___report_bug+0x10/0x10 [ 146.947015][ T7703] report_bug_entry+0xe1/0x290 [ 146.948592][ T7703] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 146.950295][ T7703] handle_bug+0x1cd/0x2a0 [ 146.951601][ T7703] exc_invalid_op+0x17/0x50 [ 146.952964][ T7703] asm_exc_invalid_op+0x1a/0x20 [ 146.954453][ T7703] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 146.956305][ T7703] Code: 89 c5 89 c6 e8 d7 d3 6a f8 45 85 ed 0f 85 be fb ff ff e8 59 d9 6a f8 48 8d 3d 72 e6 92 07 ba 48 00 00 00 48 c7 c6 a0 6c 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 37 d9 6a f8 48 8d bd 00 08 00 00 [ 146.961945][ T7703] RSP: 0018:ffffc90026af7a68 EFLAGS: 00010287 [ 146.963736][ T7703] RAX: 0000000000000272 RBX: ffff888056f08000 RCX: ffffc9000c402000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.966186][ T7703] RDX: 0000000000000048 RSI: ffffffff8d186ca0 RDI: ffffffff9131be20 [ 146.968678][ T7703] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 146.970998][ T7703] R10: 0000000000000000 R11: 000000000000001e R12: 0000000000000000 [ 146.973334][ T7703] R13: 0000000000000000 R14: ffff88806ac8a568 R15: ffffc90026af7bc8 [ 146.975696][ T7703] ? netdev_queue_get_dma_dev+0x527/0x660 [ 146.977408][ T7703] io_register_zcrx+0xe94/0x1d30 [ 146.978900][ T7703] ? __pfx_io_register_zcrx+0x10/0x10 [ 146.980520][ T7703] ? rcu_is_watching+0x12/0xc0 [ 146.982015][ T7703] ? trace_contention_end+0x126/0x160 [ 146.983636][ T7703] ? __fget_files+0x215/0x3d0 [ 146.985087][ T7703] __do_sys_io_uring_register+0x1193/0x1bc0 [ 146.986880][ T7703] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 146.988764][ T7703] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 146.990460][ T7703] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 146.992169][ T7703] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 146.993967][ T7703] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 146.995574][ T7703] __do_fast_syscall_32+0xe7/0x970 [ 146.997152][ T7703] do_fast_syscall_32+0x32/0x70 [ 146.998611][ T7703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.000485][ T7703] RIP: 0023:0xf7f88fec [ 147.001777][ T7703] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 147.003712][ T7703] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 147.006189][ T7703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000020 [ 147.008549][ T7703] RDX: 0000000080000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 147.010894][ T7703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.013221][ T7703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.015533][ T7703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.018162][ T7703] [ 147.019704][ T7703] Kernel Offset: disabled [ 147.021103][ T7703] Rebooting in 86400 seconds..