last executing test programs: 17.412848409s ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 16.865830153s ago: executing program 1 (id=124): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 16.8655997s ago: executing program 1 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='3\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 16.312726464s ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) 16.262425529s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) 16.262233523s ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1 1 1 1\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='disk\n', 0x5) 6.982363062s ago: executing program 2 (id=184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) 6.252933849s ago: executing program 2 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='myclient / 2147483647 0 0 0 0\n\x00', 0x1e) write(0xffffffffffffffff, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 3.206456535s ago: executing program 0 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) 3.206259498s ago: executing program 2 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r3, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 3.206153075s ago: executing program 3 (id=199): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001002005a"}}, 0xd) 3.131279757s ago: executing program 2 (id=200): r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109023c0001010080fa0904000006ff000000070581024000000705010240000007058202400000070502024000000705830240000007050302400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000240)=""/64) (async) syz_usb_ep_write(r0, 0x82, 0xe, &(0x7f0000000140)="8200000000000000001122334455") (async) syz_usb_ep_read(r0, 0x3, 0x40, &(0x7f0000000280)=""/64) (async) syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000180)="8400000000000000") (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9000000000000000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 2.301887234s ago: executing program 3 (id=201): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=', 0xaf) getpid() close(r0) 2.301342738s ago: executing program 3 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) write(0xffffffffffffffff, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='3\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='3\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.244764431s ago: executing program 0 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) 2.17304719s ago: executing program 0 (id=204): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085"}}, 0x13f) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 2.172746405s ago: executing program 0 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='3\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='3\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.732661687s ago: executing program 3 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r3, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 1.682845833s ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) 1.602521046s ago: executing program 0 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r3, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 1.602291983s ago: executing program 0 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='myclient / 2147483647 0 0 0 0\n\x00', 0x1e) write(0xffffffffffffffff, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 586.787726ms ago: executing program 32 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='1 1 1 1\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/power/state\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='disk\n', 0x5) 78.424452ms ago: executing program 3 (id=211): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=', 0xaf) getpid() close(r0) 2.639852ms ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000) 0s ago: executing program 2 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='10\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000007c0)='10\n', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:57270' (ED25519) to the list of known hosts. [ 40.800624][ T5727] cgroup: Unknown subsys name 'net' [ 40.961259][ T5727] cgroup: Unknown subsys name 'cpuset' [ 40.965057][ T5727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.929556][ T5727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.596538][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.599138][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.599960][ T5756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.600453][ T5758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.601955][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.602785][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.603810][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.604324][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.605140][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.606590][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.607229][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.608010][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.609877][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.609929][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.612886][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.614712][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.617506][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.620768][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.623106][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.625676][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.149903][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.152791][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.155709][ T5743] bridge_slave_0: entered allmulticast mode [ 46.158571][ T5743] bridge_slave_0: entered promiscuous mode [ 46.181434][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.183727][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.185962][ T5743] bridge_slave_1: entered allmulticast mode [ 46.188851][ T5743] bridge_slave_1: entered promiscuous mode [ 46.203653][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.206031][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.208962][ T5745] bridge_slave_0: entered allmulticast mode [ 46.211744][ T5745] bridge_slave_0: entered promiscuous mode [ 46.233734][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.236074][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.238509][ T5745] bridge_slave_1: entered allmulticast mode [ 46.241161][ T5745] bridge_slave_1: entered promiscuous mode [ 46.267582][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.285984][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.288546][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.290821][ T5746] bridge_slave_0: entered allmulticast mode [ 46.293490][ T5746] bridge_slave_0: entered promiscuous mode [ 46.296775][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.299505][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.302408][ T5746] bridge_slave_1: entered allmulticast mode [ 46.305132][ T5746] bridge_slave_1: entered promiscuous mode [ 46.309512][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.317271][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.350994][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.355318][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.364573][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.388198][ T5743] team0: Port device team_slave_0 added [ 46.391486][ T5743] team0: Port device team_slave_1 added [ 46.412661][ T5745] team0: Port device team_slave_0 added [ 46.422238][ T5746] team0: Port device team_slave_0 added [ 46.424374][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.427103][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.430115][ T5744] bridge_slave_0: entered allmulticast mode [ 46.432875][ T5744] bridge_slave_0: entered promiscuous mode [ 46.437568][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.439864][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.442150][ T5744] bridge_slave_1: entered allmulticast mode [ 46.444888][ T5744] bridge_slave_1: entered promiscuous mode [ 46.448735][ T5745] team0: Port device team_slave_1 added [ 46.457030][ T5746] team0: Port device team_slave_1 added [ 46.481797][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.484558][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.493092][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.504029][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.506270][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.514360][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.524432][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.526867][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.535277][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.539925][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.542993][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.551459][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.556056][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.559237][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.567907][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.577665][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.585686][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.589098][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.591288][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.599275][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.657116][ T5744] team0: Port device team_slave_0 added [ 46.660397][ T5744] team0: Port device team_slave_1 added [ 46.670759][ T5743] hsr_slave_0: entered promiscuous mode [ 46.673258][ T5743] hsr_slave_1: entered promiscuous mode [ 46.679255][ T5745] hsr_slave_0: entered promiscuous mode [ 46.681489][ T5745] hsr_slave_1: entered promiscuous mode [ 46.683640][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 46.685485][ T5745] Cannot create hsr debugfs directory [ 46.696757][ T5746] hsr_slave_0: entered promiscuous mode [ 46.700154][ T5746] hsr_slave_1: entered promiscuous mode [ 46.702878][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 46.704776][ T5746] Cannot create hsr debugfs directory [ 46.715458][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.717677][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.725765][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.750583][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.752804][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.761080][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.863754][ T5744] hsr_slave_0: entered promiscuous mode [ 46.865997][ T5744] hsr_slave_1: entered promiscuous mode [ 46.868076][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 46.870002][ T5744] Cannot create hsr debugfs directory [ 47.025162][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.032176][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.035253][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.040992][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.044688][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.049001][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.051650][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.056239][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.096176][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.100875][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.103662][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.108833][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.121119][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.126271][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.129703][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.133959][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.183234][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.190017][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.193277][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.197066][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.201483][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.205511][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.208245][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.217224][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.275419][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.279627][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.282367][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.286155][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.289950][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.293786][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.304075][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.308567][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.329997][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.367890][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.373954][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.381679][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.384254][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.404612][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.406917][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.421043][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.427747][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.439286][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.441661][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.451602][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.453967][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.483898][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.495788][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.498148][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.514969][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.524531][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.527741][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.551523][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.563035][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.565473][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.576159][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.578493][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.640216][ T5748] Bluetooth: hci1: command tx timeout [ 47.644345][ T5748] Bluetooth: hci0: command tx timeout [ 47.708706][ T5748] Bluetooth: hci2: command tx timeout [ 47.709553][ T5756] Bluetooth: hci3: command tx timeout [ 47.787232][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.798062][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.862157][ T5745] veth0_vlan: entered promiscuous mode [ 47.865901][ T5746] veth0_vlan: entered promiscuous mode [ 47.874319][ T5746] veth1_vlan: entered promiscuous mode [ 47.881090][ T5745] veth1_vlan: entered promiscuous mode [ 47.890423][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.900661][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.922646][ T5745] veth0_macvtap: entered promiscuous mode [ 47.929740][ T5746] veth0_macvtap: entered promiscuous mode [ 47.935321][ T5745] veth1_macvtap: entered promiscuous mode [ 47.947181][ T5746] veth1_macvtap: entered promiscuous mode [ 47.956180][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.969311][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.982507][ T5743] veth0_vlan: entered promiscuous mode [ 47.989522][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.996372][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.001580][ T5744] veth0_vlan: entered promiscuous mode [ 48.015421][ T5744] veth1_vlan: entered promiscuous mode [ 48.023815][ T5743] veth1_vlan: entered promiscuous mode [ 48.038572][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.049633][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.093496][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.099003][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.105524][ T5744] veth0_macvtap: entered promiscuous mode [ 48.117554][ T5743] veth0_macvtap: entered promiscuous mode [ 48.126157][ T5744] veth1_macvtap: entered promiscuous mode [ 48.142738][ T5743] veth1_macvtap: entered promiscuous mode [ 48.147832][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.151181][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.151731][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.156520][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.162275][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.172071][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.182907][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.185912][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.186140][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.198191][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.205719][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.231261][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.237790][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.245603][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.259605][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 48.323702][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.329244][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.355860][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.359819][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.372411][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.376112][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.386257][ T5897] nvme_fabrics: missing parameter 'transport=%s' [ 48.389052][ T5897] nvme_fabrics: missing parameter 'nqn=%s' [ 48.393788][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.396299][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.410382][ T42] audit: type=1800 audit(1785855404.073:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="memory_backed" dev="configfs" ino=10370 res=0 errno=0 [ 48.421178][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.423209][ T42] audit: type=1800 audit(1785855404.073:3): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="power" dev="configfs" ino=10371 res=0 errno=0 [ 48.428080][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446700][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.457199][ T5899] null_blk: disk nullb1 created [ 48.469189][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.471729][ T5899] zonefs (nullb1) ERROR: Not a zoned block device [ 48.477284][ T5902] zonefs (nullb1) ERROR: Not a zoned block device [ 48.478753][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.499322][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.502382][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.522693][ T42] audit: type=1800 audit(1785855404.183:4): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idVendor" dev="configfs" ino=8628 res=0 errno=0 [ 48.531260][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.543475][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.550203][ T42] audit: type=1800 audit(1785855404.193:5): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="idProduct" dev="configfs" ino=8629 res=0 errno=0 [ 48.559587][ T42] audit: type=1800 audit(1785855404.213:6): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="process_ump" dev="configfs" ino=8637 res=0 errno=0 [ 48.573435][ T42] audit: type=1800 audit(1785855404.223:7): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="direction" dev="configfs" ino=8638 res=0 errno=0 [ 48.580078][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.580326][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.583319][ T42] audit: type=1800 audit(1785855404.223:8): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="active" dev="configfs" ino=8639 res=0 errno=0 [ 48.597332][ T42] audit: type=1800 audit(1785855404.233:9): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="direction" dev="configfs" ino=8642 res=0 errno=0 [ 48.601285][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.604453][ T42] audit: type=1800 audit(1785855404.233:10): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="active" dev="configfs" ino=8643 res=0 errno=0 [ 48.613075][ T42] audit: type=1800 audit(1785855404.253:11): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="UDC" dev="configfs" ino=9697 res=0 errno=0 [ 48.623392][ T5913] zonefs (nullb1) ERROR: Not a zoned block device [ 48.658559][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661509][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.678031][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.683876][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.888467][ T5113] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.044701][ T5113] usb 5-1: Dual-Role OTG device on HNP port [ 49.047961][ T5113] usb 5-1: New USB device found, idVendor=0000, idProduct=1000, bcdDevice= 7.02 [ 49.051726][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.230447][ T5932] zonefs (nullb1) ERROR: Not a zoned block device [ 49.277492][ T5937] jffs2: notice: (5937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.444119][ T5940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.678848][ T5906] NFSD: Unable to initialize client recovery tracking! (-110) [ 49.682165][ T5906] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 49.684991][ T5906] NFSD: starting 10-second grace period (net f0000505) [ 49.719478][ T5756] Bluetooth: hci0: command tx timeout [ 49.719550][ T5748] Bluetooth: hci1: command tx timeout [ 49.766330][ T5941] md/raid:md0: not clean -- starting background reconstruction [ 49.770443][ T5941] md/raid:md0: device ram0 operational as raid disk 0 [ 49.788988][ T5748] Bluetooth: hci3: command tx timeout [ 49.789207][ T5756] Bluetooth: hci2: command tx timeout [ 49.793569][ T5941] md/raid:md0: not enough operational devices (3/4 failed) [ 49.903089][ T5941] md/raid:md0: failed to run raid set. [ 49.905134][ T5941] md: pers->run() failed ... [ 49.963738][ T5946] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 50.539687][ T5950] jffs2: notice: (5950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.828530][ T5921] NFSD: Unable to initialize client recovery tracking! (-110) [ 50.831078][ T5921] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 50.833895][ T5921] NFSD: starting 90-second grace period (net f00003f8) [ 51.271445][ T5532] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 51.316884][ T5962] fido_id[5962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.492069][ T5969] zonefs (nullb1) ERROR: Not a zoned block device [ 51.532770][ T5971] zonefs (nullb1) ERROR: Not a zoned block device [ 51.698908][ T5975] zonefs (nullb1) ERROR: Not a zoned block device [ 51.736844][ T5977] zonefs (nullb1) ERROR: Not a zoned block device [ 51.783815][ T5979] nvme_fabrics: missing parameter 'transport=%s' [ 51.785941][ T5979] nvme_fabrics: missing parameter 'nqn=%s' [ 51.789243][ T5756] Bluetooth: hci0: command tx timeout [ 51.789318][ T5748] Bluetooth: hci1: command tx timeout [ 51.814752][ T5982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.841103][ T5986] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 51.869505][ T5748] Bluetooth: hci2: command tx timeout [ 51.873678][ T5756] Bluetooth: hci3: command tx timeout [ 51.925944][ T5992] zonefs (nullb1) ERROR: Not a zoned block device [ 51.929078][ T5993] zonefs (nullb1) ERROR: Not a zoned block device [ 51.959123][ T5982] md: could not open device unknown-block(1,0). [ 51.977674][ T5997] zonefs (nullb1) ERROR: Not a zoned block device [ 51.999806][ T5989] md: could not open device unknown-block(1,1). [ 52.051217][ T5982] md: could not open device unknown-block(1,2). [ 52.108070][ T6002] zonefs (nullb1) ERROR: Not a zoned block device [ 52.123535][ T5982] md/raid:md0: not clean -- starting background reconstruction [ 52.125970][ T5982] md/raid:md0: device ram0 operational as raid disk 0 [ 52.145278][ T5982] md/raid:md0: not enough operational devices (3/4 failed) [ 52.161082][ T6005] nvme_fabrics: missing parameter 'transport=%s' [ 52.163247][ T6005] nvme_fabrics: missing parameter 'nqn=%s' [ 52.223138][ T6011] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 52.352285][ T5982] md/raid:md0: failed to run raid set. [ 52.354136][ T5982] md: pers->run() failed ... [ 52.356019][ T5989] md: could not open device unknown-block(1,3). [ 52.403253][ T6015] zonefs (nullb1) ERROR: Not a zoned block device [ 52.443388][ T6017] zonefs (nullb1) ERROR: Not a zoned block device [ 52.486800][ T6019] zonefs (nullb1) ERROR: Not a zoned block device [ 52.567120][ T6023] zonefs (nullb1) ERROR: Not a zoned block device [ 52.637974][ T6025] nvme_fabrics: missing parameter 'transport=%s' [ 52.640863][ T6025] nvme_fabrics: missing parameter 'nqn=%s' [ 52.760980][ T6033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.818646][ T6035] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 52.873350][ T6039] zonefs (nullb1) ERROR: Not a zoned block device [ 52.911470][ T6041] zonefs (nullb1) ERROR: Not a zoned block device [ 52.938755][ T6033] md: could not open device unknown-block(1,0). [ 52.952417][ T6043] zonefs (nullb1) ERROR: Not a zoned block device [ 52.978579][ T6037] md: could not open device unknown-block(1,1). [ 53.018637][ T6033] md: could not open device unknown-block(1,2). [ 53.058709][ T6033] md: could not open device unknown-block(1,3). [ 53.079456][ T6033] md/raid:md0: not clean -- starting background reconstruction [ 53.082428][ T6033] md/raid:md0: device ram0 operational as raid disk 0 [ 53.085711][ T6048] zonefs (nullb1) ERROR: Not a zoned block device [ 53.098170][ T6033] md/raid:md0: not enough operational devices (3/4 failed) [ 53.108564][ T5996] NFSD: Unable to initialize client recovery tracking! (-110) [ 53.110936][ T5996] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 53.120029][ T5996] NFSD: starting 10-second grace period (net f00003f7) [ 53.142085][ T6051] nvme_fabrics: missing parameter 'transport=%s' [ 53.144168][ T6051] nvme_fabrics: missing parameter 'nqn=%s' [ 53.300186][ T6033] md/raid:md0: failed to run raid set. [ 53.301946][ T6033] md: pers->run() failed ... [ 53.360647][ T6059] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 53.403996][ T6062] zonefs (nullb1) ERROR: Not a zoned block device [ 53.524462][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 53.524475][ T42] audit: type=1800 audit(1785855409.183:76): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="zoned" dev="configfs" ino=8740 res=0 errno=0 [ 53.532612][ T42] audit: type=1800 audit(1785855409.183:77): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="memory_backed" dev="configfs" ino=8741 res=0 errno=0 [ 53.534652][ T6066] zonefs (nullb1) ERROR: Not a zoned block device [ 53.540752][ T42] audit: type=1800 audit(1785855409.183:78): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="power" dev="configfs" ino=8742 res=0 errno=0 [ 53.583718][ T42] audit: type=1800 audit(1785855409.243:79): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.64" name="idVendor" dev="configfs" ino=9795 res=0 errno=0 [ 53.679585][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.747218][ T42] audit: type=1800 audit(1785855409.403:80): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="zoned" dev="configfs" ino=9805 res=0 errno=0 [ 53.755121][ T42] audit: type=1800 audit(1785855409.403:81): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="memory_backed" dev="configfs" ino=9806 res=0 errno=0 [ 53.757730][ T6071] zonefs (nullb1) ERROR: Not a zoned block device [ 53.762667][ T42] audit: type=1800 audit(1785855409.413:82): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.66" name="power" dev="configfs" ino=8745 res=0 errno=0 [ 53.821842][ T6073] nvme_fabrics: missing parameter 'nqn=%s' [ 53.833929][ T59] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 53.837073][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.839773][ T59] usb 7-1: Product: syz [ 53.843328][ T59] usb 7-1: Manufacturer: syz [ 53.844817][ T59] usb 7-1: SerialNumber: syz [ 53.861006][ T59] usb 7-1: cannot find UAC_HEADER [ 53.863394][ T59] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 53.868221][ T59] usb 7-1: cannot find UAC_HEADER [ 53.870429][ T5756] Bluetooth: hci1: command tx timeout [ 53.870453][ T5748] Bluetooth: hci0: command tx timeout [ 53.870777][ T59] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 53.874670][ T59] usb 7-1: cannot find UAC_HEADER [ 53.878620][ T59] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 53.883140][ T59] usb 7-1: cannot find UAC_HEADER [ 53.884689][ T6076] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.906021][ T59] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 53.939937][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 53.949774][ T5748] Bluetooth: hci3: command tx timeout [ 53.950240][ T5756] Bluetooth: hci2: command tx timeout [ 54.068636][ T6076] md: could not open device unknown-block(1,0). [ 54.128725][ T6078] md: could not open device unknown-block(1,1). [ 54.168629][ T6076] md: could not open device unknown-block(1,2). [ 54.172506][ T42] audit: type=1800 audit(1785855409.833:83): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.65" name="memory_backed" dev="configfs" ino=9817 res=0 errno=0 [ 54.179080][ T42] audit: type=1800 audit(1785855409.833:84): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.65" name="power" dev="configfs" ino=9818 res=0 errno=0 [ 54.180558][ T6083] zonefs (nullb1) ERROR: Not a zoned block device [ 54.216181][ T6076] md/raid:md0: not clean -- starting background reconstruction [ 54.218980][ T6076] md/raid:md0: device ram1 operational as raid disk 1 [ 54.221208][ T6076] md/raid:md0: device ram0 operational as raid disk 0 [ 54.235183][ T6087] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 54.241642][ T6076] md/raid:md0: not enough operational devices (2/4 failed) [ 54.267830][ T42] audit: type=1800 audit(1785855409.923:85): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.71" name="idVendor" dev="configfs" ino=10611 res=0 errno=0 [ 54.431752][ T6076] md/raid:md0: failed to run raid set. [ 54.433724][ T6076] md: pers->run() failed ... [ 54.435506][ T6078] md: could not open device unknown-block(1,3). [ 54.483839][ T6096] zonefs (nullb1) ERROR: Not a zoned block device [ 54.536604][ T6098] zonefs (nullb1) ERROR: Not a zoned block device [ 54.812586][ T6103] zonefs (nullb1) ERROR: Not a zoned block device [ 54.864137][ T6105] nvme_fabrics: missing parameter 'nqn=%s' [ 54.990585][ T6111] zonefs (nullb1) ERROR: Not a zoned block device [ 55.049785][ T6113] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 55.058228][ T41] usb 7-1: USB disconnect, device number 2 [ 55.109206][ T6116] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.248674][ T6116] md: could not open device unknown-block(1,0). [ 55.289544][ T6116] md: could not open device unknown-block(1,1). [ 55.328733][ T6116] md: could not open device unknown-block(1,2). [ 55.368652][ T6116] md: could not open device unknown-block(1,3). [ 55.389230][ T6116] md/raid:md0: not clean -- starting background reconstruction [ 55.392206][ T6116] md/raid:md0: device ram1 operational as raid disk 1 [ 55.394437][ T6116] md/raid:md0: device ram0 operational as raid disk 0 [ 55.407911][ T6116] md/raid:md0: not enough operational devices (2/4 failed) [ 55.436823][ T6123] zonefs (nullb1) ERROR: Not a zoned block device [ 55.541794][ T6116] md/raid:md0: failed to run raid set. [ 55.543633][ T6116] md: pers->run() failed ... [ 55.596201][ T6127] zonefs (nullb1) ERROR: Not a zoned block device [ 55.612175][ T6129] zonefs (nullb1) ERROR: Not a zoned block device [ 55.673521][ T6133] nvme_fabrics: missing parameter 'nqn=%s' [ 55.719642][ T6136] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 56.092606][ T6148] jffs2: notice: (6148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.206396][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.210530][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.238549][ T6118] NFSD: Unable to initialize client recovery tracking! (-110) [ 56.241679][ T6118] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 56.244724][ T6118] NFSD: starting 10-second grace period (net f00003f8) [ 56.346376][ T6161] zonefs (nullb1) ERROR: Not a zoned block device [ 56.398529][ T6163] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 56.526559][ T6170] jffs2: notice: (6170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.547322][ T5113] logitech-hidpp-device 0005:046D:B012.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 56.577622][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.639593][ T6182] zonefs (nullb1) ERROR: Not a zoned block device [ 56.673448][ T6184] zonefs (nullb1) ERROR: Not a zoned block device [ 56.725177][ T6186] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 56.770502][ T6189] zonefs (nullb1) ERROR: Not a zoned block device [ 57.068473][ T5113] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.072856][ T6195] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 57.117200][ T5532] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 57.140995][ T6199] fido_id[6199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.166496][ T6205] zonefs (nullb1) ERROR: Not a zoned block device [ 57.200924][ T6207] zonefs (nullb1) ERROR: Not a zoned block device [ 57.232616][ T5113] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 57.235582][ T5113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.253840][ T6210] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 57.748586][ T6219] zonefs (nullb1) ERROR: Not a zoned block device [ 58.428515][ T6214] NFSD: Unable to initialize client recovery tracking! (-110) [ 58.431491][ T6214] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 58.434674][ T6214] NFSD: starting 10-second grace period (net f000058c) [ 58.587116][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 58.587127][ T42] audit: type=1800 audit(1785855414.243:150): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="idVendor" dev="configfs" ino=10708 res=0 errno=0 [ 58.596660][ T42] audit: type=1800 audit(1785855414.253:151): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="process_ump" dev="configfs" ino=10709 res=0 errno=0 [ 58.603298][ T42] audit: type=1800 audit(1785855414.253:152): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="direction" dev="configfs" ino=8845 res=0 errno=0 [ 58.609944][ T42] audit: type=1800 audit(1785855414.253:153): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="active" dev="configfs" ino=8846 res=0 errno=0 [ 58.616240][ T42] audit: type=1800 audit(1785855414.253:154): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="direction" dev="configfs" ino=8847 res=0 errno=0 [ 58.622761][ T42] audit: type=1800 audit(1785855414.253:155): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="active" dev="configfs" ino=8848 res=0 errno=0 [ 58.628960][ T42] audit: type=1800 audit(1785855414.253:156): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.125" name="UDC" dev="configfs" ino=8849 res=0 errno=0 [ 58.708523][ T5113] gud 7-1:1.0: probe with driver gud failed with error -71 [ 58.715313][ T5113] usb 7-1: USB disconnect, device number 3 [ 59.129260][ T6235] jffs2: notice: (6235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.430113][ T6240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.430157][ T6240] [ 76.430160][ T6240] ====================================================== [ 76.430170][ T6240] WARNING: possible circular locking dependency detected [ 76.430174][ T6240] syzkaller #0 Not tainted [ 76.430179][ T6240] ------------------------------------------------------ [ 76.430183][ T6240] syz.1.129/6240 is trying to acquire lock: [ 76.430188][ T6240] ffffffff8eaf3f60 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 76.430214][ T6240] [ 76.430214][ T6240] but task is already holding lock: [ 76.430218][ T6240] ffff888028c3d510 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x8b/0x380 [ 76.430243][ T6240] [ 76.430243][ T6240] which lock already depends on the new lock. [ 76.430243][ T6240] [ 76.430246][ T6240] [ 76.430246][ T6240] the existing dependency chain (in reverse order) is: [ 76.430250][ T6240] [ 76.430250][ T6240] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 76.430263][ T6240] lock_acquire+0x1b9/0x370 [ 76.430279][ T6240] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.430291][ T6240] try_to_wake_up+0xbd/0x1c90 [ 76.430302][ T6240] __wake_up_common+0x135/0x1f0 [ 76.430317][ T6240] __wake_up+0x31/0x60 [ 76.430329][ T6240] tty_port_default_wakeup+0x47/0x60 [ 76.430346][ T6240] serial8250_tx_chars+0x68f/0x860 [ 76.430362][ T6240] serial8250_handle_irq_locked+0x770/0x9a0 [ 76.430378][ T6240] serial8250_handle_irq.part.0+0xb4/0x530 [ 76.430394][ T6240] serial8250_default_handle_irq+0xc2/0x280 [ 76.430411][ T6240] serial8250_interrupt+0xf8/0x1b0 [ 76.430421][ T6240] __handle_irq_event_percpu+0x232/0x880 [ 76.430434][ T6240] handle_irq_event+0xab/0x1e0 [ 76.430446][ T6240] handle_edge_irq+0x34c/0x950 [ 76.430457][ T6240] __common_interrupt+0xd8/0x2f0 [ 76.430467][ T6240] common_interrupt+0xb9/0xe0 [ 76.430476][ T6240] asm_common_interrupt+0x26/0x40 [ 76.430491][ T6240] pv_native_safe_halt+0xf/0x20 [ 76.430503][ T6240] default_idle+0x9/0x10 [ 76.430517][ T6240] default_idle_call+0x6c/0xb0 [ 76.430532][ T6240] do_idle+0x3a7/0x5b0 [ 76.430542][ T6240] cpu_startup_entry+0x4f/0x60 [ 76.430553][ T6240] start_secondary+0x21d/0x2d0 [ 76.430565][ T6240] common_startup_64+0x13e/0x158 [ 76.430579][ T6240] [ 76.430579][ T6240] -> #2 (&tty->write_wait){-...}-{3:3}: [ 76.430593][ T6240] lock_acquire+0x1b9/0x370 [ 76.430608][ T6240] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.430619][ T6240] __wake_up+0x1c/0x60 [ 76.430632][ T6240] tty_port_default_wakeup+0x47/0x60 [ 76.430647][ T6240] serial8250_tx_chars+0x68f/0x860 [ 76.430663][ T6240] __start_tx+0x3e4/0x490 [ 76.430677][ T6240] serial8250_start_tx+0x368/0x540 [ 76.430692][ T6240] __uart_start+0x295/0x510 [ 76.430704][ T6240] uart_write+0x211/0xb20 [ 76.430718][ T6240] n_tty_write+0x431/0x1160 [ 76.430727][ T6240] file_tty_write.isra.0+0x4d2/0x890 [ 76.430742][ T6240] redirected_tty_write+0xd4/0x120 [ 76.430756][ T6240] vfs_write+0x6ac/0x1050 [ 76.430764][ T6240] ksys_write+0x12a/0x250 [ 76.430773][ T6240] do_syscall_64+0x115/0x840 [ 76.430786][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.430796][ T6240] [ 76.430796][ T6240] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 76.430810][ T6240] lock_acquire+0x1b9/0x370 [ 76.430825][ T6240] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.430836][ T6240] serial8250_console_write+0x177/0x1a50 [ 76.430846][ T6240] console_flush_one_record+0x790/0xe50 [ 76.430859][ T6240] console_unlock+0x103/0x260 [ 76.430870][ T6240] vprintk_emit+0x407/0x6b0 [ 76.430882][ T6240] _printk+0xcf/0x110 [ 76.430892][ T6240] register_console.cold+0xc0/0x248 [ 76.430906][ T6240] univ8250_console_init+0x6f/0x80 [ 76.430925][ T6240] console_init+0x3d5/0x5b0 [ 76.430940][ T6240] start_kernel+0x314/0x490 [ 76.430962][ T6240] x86_64_start_reservations+0x24/0x30 [ 76.430984][ T6240] x86_64_start_kernel+0x12b/0x130 [ 76.431005][ T6240] common_startup_64+0x13e/0x158 [ 76.431029][ T6240] [ 76.431029][ T6240] -> #0 (console_owner){....}-{0:0}: [ 76.431042][ T6240] check_prev_add+0xeb/0xe60 [ 76.431058][ T6240] __lock_acquire+0x136c/0x1a40 [ 76.431073][ T6240] lock_acquire+0x1b9/0x370 [ 76.431089][ T6240] console_lock_spinning_enable+0x72/0x80 [ 76.431100][ T6240] console_flush_one_record+0x739/0xe50 [ 76.431113][ T6240] console_unlock+0x103/0x260 [ 76.431124][ T6240] vprintk_emit+0x407/0x6b0 [ 76.431136][ T6240] _printk+0xcf/0x110 [ 76.431144][ T6240] vpanic+0x45c/0x970 [ 76.431153][ T6240] panic+0xd1/0xe0 [ 76.431161][ T6240] check_panic_on_warn.cold+0x19/0x34 [ 76.431171][ T6240] __warn.cold+0x191/0x318 [ 76.431180][ T6240] __report_bug+0x30f/0x440 [ 76.431194][ T6240] report_bug+0xb2/0x220 [ 76.431206][ T6240] handle_bug+0x16a/0x2a0 [ 76.431221][ T6240] exc_invalid_op+0x17/0x50 [ 76.431236][ T6240] asm_exc_invalid_op+0x1a/0x20 [ 76.431245][ T6240] __set_task_frozen+0x211/0x2e0 [ 76.431258][ T6240] task_call_func+0x169/0x380 [ 76.431272][ T6240] freeze_task+0x151/0x270 [ 76.431284][ T6240] try_to_freeze_tasks+0x243/0x680 [ 76.431300][ T6240] freeze_processes+0xf2/0x1f0 [ 76.431309][ T6240] hibernate.cold+0xf0/0x6a2 [ 76.431318][ T6240] state_store+0x1ff/0x240 [ 76.431333][ T6240] kobj_attr_store+0x58/0x80 [ 76.431348][ T6240] sysfs_kf_write+0xf2/0x150 [ 76.431361][ T6240] kernfs_fop_write_iter+0x3e0/0x5f0 [ 76.431373][ T6240] vfs_write+0x6ac/0x1050 [ 76.431381][ T6240] ksys_write+0x12a/0x250 [ 76.431390][ T6240] __do_fast_syscall_32+0xe7/0x970 [ 76.431404][ T6240] do_fast_syscall_32+0x32/0x70 [ 76.431418][ T6240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.431431][ T6240] [ 76.431431][ T6240] other info that might help us debug this: [ 76.431431][ T6240] [ 76.431434][ T6240] Chain exists of: [ 76.431434][ T6240] console_owner --> &tty->write_wait --> &p->pi_lock [ 76.431434][ T6240] [ 76.431449][ T6240] Possible unsafe locking scenario: [ 76.431449][ T6240] [ 76.431452][ T6240] CPU0 CPU1 [ 76.431455][ T6240] ---- ---- [ 76.431458][ T6240] lock(&p->pi_lock); [ 76.431464][ T6240] lock(&tty->write_wait); [ 76.431471][ T6240] lock(&p->pi_lock); [ 76.431478][ T6240] lock(console_owner); [ 76.431489][ T6240] [ 76.431489][ T6240] *** DEADLOCK *** [ 76.431489][ T6240] [ 76.431491][ T6240] 10 locks held by syz.1.129/6240: [ 76.431497][ T6240] #0: ffff888013c33b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 76.431521][ T6240] #1: ffff88802979e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 76.431545][ T6240] #2: ffff88806085d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 76.431570][ T6240] #3: ffff88801cf811e8 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 76.431597][ T6240] #4: ffffffff8ea9fa80 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x56/0x70 [ 76.431623][ T6240] #5: ffffffff8e80a098 (tasklist_lock){.+.+}-{3:3}, at: try_to_freeze_tasks+0x148/0x680 [ 76.431653][ T6240] #6: ffffffff8ec17ff8 (freezer_lock){....}-{3:3}, at: freeze_task+0x71/0x270 [ 76.431678][ T6240] #7: ffff888028c3d510 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x8b/0x380 [ 76.431705][ T6240] #8: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 76.431727][ T6240] #9: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 76.431753][ T6240] [ 76.431753][ T6240] stack backtrace: [ 76.431758][ T6240] CPU: 3 UID: 0 PID: 6240 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 76.431769][ T6240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.431776][ T6240] Call Trace: [ 76.431780][ T6240] [ 76.431784][ T6240] dump_stack_lvl+0x100/0x190 [ 76.431796][ T6240] print_circular_bug.cold+0x178/0x1c7 [ 76.431813][ T6240] check_noncircular+0x146/0x160 [ 76.431830][ T6240] check_prev_add+0xeb/0xe60 [ 76.431847][ T6240] __lock_acquire+0x136c/0x1a40 [ 76.431865][ T6240] lock_acquire+0x1b9/0x370 [ 76.431881][ T6240] ? console_lock_spinning_enable+0x61/0x80 [ 76.431896][ T6240] console_lock_spinning_enable+0x72/0x80 [ 76.431908][ T6240] ? console_lock_spinning_enable+0x61/0x80 [ 76.431921][ T6240] console_flush_one_record+0x739/0xe50 [ 76.431935][ T6240] ? __pfx_console_flush_one_record+0x10/0x10 [ 76.431948][ T6240] ? __lock_acquire+0x49f/0x1a40 [ 76.431965][ T6240] ? is_printk_cpu_sync_owner+0x32/0x40 [ 76.431981][ T6240] console_unlock+0x103/0x260 [ 76.431993][ T6240] ? __pfx_console_unlock+0x10/0x10 [ 76.432006][ T6240] ? do_raw_spin_unlock+0x145/0x1e0 [ 76.432018][ T6240] ? _printk+0xcf/0x110 [ 76.432028][ T6240] vprintk_emit+0x407/0x6b0 [ 76.432041][ T6240] ? __pfx_vprintk_emit+0x10/0x10 [ 76.432054][ T6240] ? __asan_memcpy+0x3c/0x60 [ 76.432066][ T6240] ? vsnprintf+0x4c5/0x1300 [ 76.432080][ T6240] _printk+0xcf/0x110 [ 76.432090][ T6240] ? __pfx__printk+0x10/0x10 [ 76.432100][ T6240] ? panic_try_start+0x88/0xc0 [ 76.432117][ T6240] vpanic+0x45c/0x970 [ 76.432155][ T6240] ? __pfx_vpanic+0x10/0x10 [ 76.432167][ T6240] panic+0xd1/0xe0 [ 76.432176][ T6240] ? __pfx_panic+0x10/0x10 [ 76.432188][ T6240] check_panic_on_warn.cold+0x19/0x34 [ 76.432199][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.432213][ T6240] __warn.cold+0x191/0x318 [ 76.432224][ T6240] __report_bug+0x30f/0x440 [ 76.432237][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.432251][ T6240] ? __pfx___report_bug+0x10/0x10 [ 76.432265][ T6240] ? __lock_acquire+0x49f/0x1a40 [ 76.432282][ T6240] ? wakeup_preempt_fair+0x640/0x1060 [ 76.432294][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.432308][ T6240] report_bug+0xb2/0x220 [ 76.432321][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.432334][ T6240] handle_bug+0x16a/0x2a0 [ 76.432350][ T6240] exc_invalid_op+0x17/0x50 [ 76.432366][ T6240] asm_exc_invalid_op+0x1a/0x20 [ 76.432376][ T6240] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 76.432390][ T6240] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 7c 85 00 8b ab 98 0b 00 00 31 ff 89 ee e8 09 e7 15 00 85 ed 74 09 e8 90 ec 15 00 90 <0f> 0b 90 e8 87 ec 15 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 76.432401][ T6240] RSP: 0018:ffffc9000f2a7978 EFLAGS: 00010046 [ 76.432409][ T6240] RAX: 0000000000080000 RBX: ffff888028c3ca80 RCX: ffffc9000c001000 [ 76.432416][ T6240] RDX: 0000000000080000 RSI: ffffffff81f3c470 RDI: ffff888025dd4a80 [ 76.432423][ T6240] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 76.432429][ T6240] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888028c3ca98 [ 76.432435][ T6240] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888028c3d4f8 [ 76.432444][ T6240] ? __set_task_frozen+0x210/0x2e0 [ 76.432458][ T6240] ? __set_task_frozen+0x210/0x2e0 [ 76.432472][ T6240] ? __pfx___set_task_frozen+0x10/0x10 [ 76.432489][ T6240] task_call_func+0x169/0x380 [ 76.432503][ T6240] ? cgroup1_freezing+0x12c/0x3b0 [ 76.432517][ T6240] ? cgroup1_freezing+0x12c/0x3b0 [ 76.432530][ T6240] ? __pfx_task_call_func+0x10/0x10 [ 76.432545][ T6240] ? cgroup1_freezing+0x136/0x3b0 [ 76.432559][ T6240] freeze_task+0x151/0x270 [ 76.432572][ T6240] ? __pfx_freeze_task+0x10/0x10 [ 76.432586][ T6240] ? lockdep_hardirqs_on+0x78/0x100 [ 76.432600][ T6240] try_to_freeze_tasks+0x243/0x680 [ 76.432617][ T6240] ? do_raw_spin_lock+0x100/0x260 [ 76.432629][ T6240] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 76.432647][ T6240] ? lockdep_hardirqs_on+0x78/0x100 [ 76.432661][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.432676][ T6240] freeze_processes+0xf2/0x1f0 [ 76.432686][ T6240] hibernate.cold+0xf0/0x6a2 [ 76.432696][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.432711][ T6240] state_store+0x1ff/0x240 [ 76.432727][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.432743][ T6240] kobj_attr_store+0x58/0x80 [ 76.432759][ T6240] ? __pfx_kobj_attr_store+0x10/0x10 [ 76.432775][ T6240] sysfs_kf_write+0xf2/0x150 [ 76.432790][ T6240] kernfs_fop_write_iter+0x3e0/0x5f0 [ 76.432802][ T6240] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.432816][ T6240] vfs_write+0x6ac/0x1050 [ 76.432826][ T6240] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 76.432840][ T6240] ? __pfx_vfs_write+0x10/0x10 [ 76.432849][ T6240] ? find_held_lock+0x2b/0x80 [ 76.432865][ T6240] ksys_write+0x12a/0x250 [ 76.432874][ T6240] ? __pfx_ksys_write+0x10/0x10 [ 76.432885][ T6240] __do_fast_syscall_32+0xe7/0x970 [ 76.432901][ T6240] do_fast_syscall_32+0x32/0x70 [ 76.432916][ T6240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.432930][ T6240] RIP: 0023:0xf70aefec [ 76.432940][ T6240] Code: Unable to access opcode bytes at 0xf70aefc2. [ 76.432945][ T6240] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 76.432954][ T6240] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000480 [ 76.432961][ T6240] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.432967][ T6240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.432973][ T6240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.432980][ T6240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.432989][ T6240] [ 76.819716][ T6240] CPU: 3 UID: 0 PID: 6240 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 76.822375][ T6240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.825325][ T6240] Call Trace: [ 76.826366][ T6240] [ 76.827305][ T6240] dump_stack_lvl+0x100/0x190 [ 76.828738][ T6240] vpanic+0x552/0x970 [ 76.830017][ T6240] ? __pfx_vpanic+0x10/0x10 [ 76.831389][ T6240] panic+0xd1/0xe0 [ 76.832545][ T6240] ? __pfx_panic+0x10/0x10 [ 76.833909][ T6240] check_panic_on_warn.cold+0x19/0x34 [ 76.835544][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.837113][ T6240] __warn.cold+0x191/0x318 [ 76.838475][ T6240] __report_bug+0x30f/0x440 [ 76.839863][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.841484][ T6240] ? __pfx___report_bug+0x10/0x10 [ 76.843011][ T6240] ? __lock_acquire+0x49f/0x1a40 [ 76.844649][ T6240] ? wakeup_preempt_fair+0x640/0x1060 [ 76.846348][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.848241][ T6240] report_bug+0xb2/0x220 [ 76.849887][ T6240] ? __set_task_frozen+0x211/0x2e0 [ 76.851572][ T6240] handle_bug+0x16a/0x2a0 [ 76.853026][ T6240] exc_invalid_op+0x17/0x50 [ 76.854620][ T6240] asm_exc_invalid_op+0x1a/0x20 [ 76.856353][ T6240] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 76.858388][ T6240] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 b8 7c 85 00 8b ab 98 0b 00 00 31 ff 89 ee e8 09 e7 15 00 85 ed 74 09 e8 90 ec 15 00 90 <0f> 0b 90 e8 87 ec 15 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 76.864537][ T6240] RSP: 0018:ffffc9000f2a7978 EFLAGS: 00010046 [ 76.866411][ T6240] RAX: 0000000000080000 RBX: ffff888028c3ca80 RCX: ffffc9000c001000 [ 76.869243][ T6240] RDX: 0000000000080000 RSI: ffffffff81f3c470 RDI: ffff888025dd4a80 [ 76.871607][ T6240] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 76.874072][ T6240] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888028c3ca98 [ 76.876466][ T6240] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888028c3d4f8 [ 76.878941][ T6240] ? __set_task_frozen+0x210/0x2e0 [ 76.880496][ T6240] ? __set_task_frozen+0x210/0x2e0 [ 76.882059][ T6240] ? __pfx___set_task_frozen+0x10/0x10 [ 76.883757][ T6240] task_call_func+0x169/0x380 [ 76.885199][ T6240] ? cgroup1_freezing+0x12c/0x3b0 [ 76.886742][ T6240] ? cgroup1_freezing+0x12c/0x3b0 [ 76.888271][ T6240] ? __pfx_task_call_func+0x10/0x10 [ 76.889839][ T6240] ? cgroup1_freezing+0x136/0x3b0 [ 76.891381][ T6240] freeze_task+0x151/0x270 [ 76.892777][ T6240] ? __pfx_freeze_task+0x10/0x10 [ 76.894307][ T6240] ? lockdep_hardirqs_on+0x78/0x100 [ 76.895893][ T6240] try_to_freeze_tasks+0x243/0x680 [ 76.897462][ T6240] ? do_raw_spin_lock+0x100/0x260 [ 76.899004][ T6240] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 76.900704][ T6240] ? lockdep_hardirqs_on+0x78/0x100 [ 76.902343][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.904058][ T6240] freeze_processes+0xf2/0x1f0 [ 76.905498][ T6240] hibernate.cold+0xf0/0x6a2 [ 76.906920][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.908383][ T6240] state_store+0x1ff/0x240 [ 76.909766][ T6240] ? __pfx_state_store+0x10/0x10 [ 76.911723][ T6240] kobj_attr_store+0x58/0x80 [ 76.913159][ T6240] ? __pfx_kobj_attr_store+0x10/0x10 [ 76.914784][ T6240] sysfs_kf_write+0xf2/0x150 [ 76.916204][ T6240] kernfs_fop_write_iter+0x3e0/0x5f0 [ 76.917785][ T6240] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.919360][ T6240] vfs_write+0x6ac/0x1050 [ 76.920685][ T6240] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 76.922474][ T6240] ? __pfx_vfs_write+0x10/0x10 [ 76.923952][ T6240] ? find_held_lock+0x2b/0x80 [ 76.925433][ T6240] ksys_write+0x12a/0x250 [ 76.926749][ T6240] ? __pfx_ksys_write+0x10/0x10 [ 76.928220][ T6240] __do_fast_syscall_32+0xe7/0x970 [ 76.929770][ T6240] do_fast_syscall_32+0x32/0x70 [ 76.931250][ T6240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.933165][ T6240] RIP: 0023:0xf70aefec [ 76.934568][ T6240] Code: Unable to access opcode bytes at 0xf70aefc2. [ 76.937116][ T6240] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 76.940318][ T6240] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000480 [ 76.943381][ T6240] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.946459][ T6240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.949503][ T6240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 76.952613][ T6240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.955706][ T6240] [ 78.044403][ T6240] Shutting down cpus with NMI [ 78.046529][ T6240] Kernel Offset: disabled [ 78.047842][ T6240] Rebooting in 86400 seconds..