# https://syzkaller.appspot.com/bug?id=bf0be6ee24096ead1f3a3cb7edc06c014f4d4859 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"repeat":true,"procs":1,"slowdown":1,"sandbox":"","sandbox_arg":0,"close_fds":false,"callcomments":true} mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dbg\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/fail_make_request/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dbg/fail_make_request/times\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1000\n', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000500)="000000000000000000000000000000000a00000000080000020000000200000000000000010000000000000001000000020000000200000000000000000000000201000000000100") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000640)="0100000001000000010000000100000006000000") write(r2, &(0x7f0000000700)='\x00'/3958, 0xf76) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) nanosleep(0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004012345678000101020001"], 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000120)={0x2, 0x47}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000140), 0x2) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)