x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

20:44:13 executing program 0:
socket(0x0, 0x80d, 0x0)

20:44:13 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x4)

20:44:13 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  424.602905] ubi0: mtd0 is detached
[  424.607369] ubi0: attaching mtd0
20:44:13 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{}, {0x1f}}}, 0x8d)

[  424.662857] ubi0: scanning is finished
20:44:13 executing program 5:
sched_rr_get_interval(0x0, &(0x7f0000000180))

20:44:13 executing program 4:
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x1000}, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0)

20:44:13 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

[  424.878978] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  424.903590] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  424.920223] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  424.948829] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  424.963633] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  424.978035] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  424.995393] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  425.021771] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  425.046269] ubi0: background thread "ubi_bgt0d" started, PID 29193
[  425.052800] ubi0: detaching mtd0
[  425.060901] ubi0: mtd0 is detached
[  425.064920] ubi0: attaching mtd0
20:44:13 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:13 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x0, 0x0, 0x400004}, 0x48)

20:44:13 executing program 5:
socketpair(0x6a, 0x0, 0x0, &(0x7f0000000000))

[  425.157402] ubi0: scanning is finished
[  425.401214] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  425.410415] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  425.431154] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  425.452178] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  425.460915] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  425.468622] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  425.477374] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  425.488320] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:14 executing program 4:
r0 = getpgid(0x0)
r1 = getpgid(0x0)
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080))

20:44:14 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xb, 0x6, 0x3}, 0x14}}, 0x0)

20:44:14 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:14 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000a0a0101"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

[  425.499366] ubi0: background thread "ubi_bgt0d" started, PID 29221
[  425.507556] ubi: mtd0 is already attached to ubi0
[  425.512884] ubi0: detaching mtd0
[  425.523040] ubi0: mtd0 is detached
[  425.530665] ubi0: attaching mtd0
20:44:14 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:14 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x9, 0x301}, 0x14}}, 0x0)

20:44:14 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @vbi})

[  425.578361] ubi0: scanning is finished
20:44:14 executing program 0:
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000100)=ANY=[@ANYBLOB='umask=00000000000017777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6e6f6465636f6d706f73652c6e6c733d69736f383835392d31142c00374c553ad1ba69d6d8ce6ddfa58ebd7d5879d8d6afda1e514a60822c62957143abc5d3918edaa5bf3cee86254a76ff7a34775857db1da45f0da67f533139c35b579ebe62bacff406878c3e53968c45f9e07957ee0989f3a23f41f275d3c7e8b449efaea3d988fb9c410e165aafb21b427c496f6994113ff3c3717dd500d9787b73d15d3d981cbdf7bc5786ae241b6c97b68aedbb3ee6a49e4260487c2cc3be64b2a9470081308de9d5cf08b6f71e023734d48961d63389a5335137db5c83c5c2f65137251002cdbbc69501add6e1bdcc8de3a144f06b7fbf6762af1cd5c6757a961a0c86e40a0e047dbf41a3b6ab0f466270ebbfd84022036756d0ebe570483fded4f413cdc958bfa2937f43722a9d5db8823c7ce13a5d60f48fa386b12308e8d07856b6f388885fcdb73730ebcfb7da96bbc3399a1fc4c5bbe68a78bfb4355538d7db1b3b1fbe6cf942511e1a586bfad8419ca841e23a032b52057344981f2cdf99cdb070f8913680e7383afb14e95ea18aae67511640e35eb9b8c7440964de21a79b6ccc0343f7d59088b7c515a327de110a0cc2c572751244e2033f5aa210fe524d5c518378c368545bbf15ec251f642003911dbe81f6351341d97f4534920cc4c8b51a30ed091f0974c6c81455e8289e2dc8fca7549743b01d390b1d96a8d0c37bf138ce3d4bc1b12bc54d463f8e9bd951d3a08a7b117610102b92bd0a6798fb5bacd2c88169107409fc9908705e30520fe3406575cb32e82fb77fc562aad074b454d6475d1c433fd9f2c2340fd9aedf2b3a79f278cd8d49ac6ae0e4c8bda18193cd1a04cf923aea099a364f49d033e4968f9dc6e670796eb0b57d10ac39e3ab217ad0f0be0e6b76386d4c4f64428593e1daf0b2fd6fdb5ace1bc5141cda"], 0x0, 0x616, &(0x7f0000003300)="$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")

20:44:14 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
write$binfmt_misc(r0, 0x0, 0xfffffffffffffeed)

[  425.688152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  425.864528] hfsplus: unable to load nls mapping "iso8859-1"
[  425.875407] hfsplus: unable to parse mount options
[  425.883165] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  425.909549] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  425.924961] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  425.933328] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  425.942371] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  425.969778] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  425.978766] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  425.989908] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  426.000878] ubi0: background thread "ubi_bgt0d" started, PID 29261
[  426.009324] ubi0: detaching mtd0
[  426.020594] ubi0: mtd0 is detached
[  426.029229] ubi0: attaching mtd0
20:44:14 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:14 executing program 5:
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0x5452, &(0x7f00000000c0)={0xa, @sliced})

20:44:14 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0205649, &(0x7f0000000200)={0xfdfdffff, 0x0, 0x0, '\x00', 0x0})

20:44:14 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)

[  426.136256] ubi0: scanning is finished
20:44:14 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0)

[  426.381599] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  426.393653] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  426.409519] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  426.417087] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  426.424413] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  426.432733] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  426.441219] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  426.452197] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:15 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:15 executing program 5:
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0xfffffffd)

20:44:15 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)

20:44:15 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000010c0)={'wlan1\x00', 0x400})

20:44:15 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  426.481577] ubi0: background thread "ubi_bgt0d" started, PID 29290
[  426.489253] ubi: mtd0 is already attached to ubi0
[  426.494270] ubi0: detaching mtd0
[  426.500868] ubi0: mtd0 is detached
[  426.506315] ubi0: attaching mtd0
[  426.565138] ubi0: scanning is finished
20:44:15 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xad382)

20:44:15 executing program 0:
syz_mount_image$udf(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2010048, &(0x7f0000000200)={[{@fileset={'fileset', 0x3d, 0xfffd}}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x42}}]}, 0x0, 0xc09, &(0x7f00000003c0)="$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")
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

[  426.746223] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  426.753371] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  426.761858] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  426.779222] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  426.789582] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  426.796870] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  426.804444] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  426.815397] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  426.827194] ubi0: background thread "ubi_bgt0d" started, PID 29316
[  426.833702] ubi0: detaching mtd0
20:44:15 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:15 executing program 4:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x0, 0x15, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0)

20:44:15 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x4, 0x0, '\x00', 0x0})

[  426.846306] ubi0: mtd0 is detached
[  426.850413] ubi0: attaching mtd0
[  426.903388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  426.903934] ubi0: scanning is finished
20:44:15 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x0)
ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x0)

20:44:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x20}}, 0x0)

[  427.115120] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  427.123182] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  427.135532] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  427.143827] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  427.151641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  427.160238] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  427.169580] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  427.192339] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  427.202723] ubi0: background thread "ubi_bgt0d" started, PID 29343
20:44:16 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x6, &(0x7f00000001c0)={@empty}, 0x14)

20:44:16 executing program 5:
r0 = socket(0x18, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}})

20:44:16 executing program 4:
syz_read_part_table(0x5e8, &(0x7f0000000000)="$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")

[  427.211024] ubi: mtd0 is already attached to ubi0
[  427.216760] ubi0: detaching mtd0
[  427.233110] ubi0: mtd0 is detached
[  427.248509] ubi0: attaching mtd0
[  427.291250] ubi0: scanning is finished
20:44:16 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:16 executing program 0:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x3, 0x0, 0x0, '\x00', 0x0})

20:44:16 executing program 5:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1020, 0x0)

[  427.399825]  loop4: [ICS]
[  427.414747]  loop4: [ICS]
[  427.528151] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  427.542060] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  427.561452] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  427.573436] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  427.590742] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  427.599904] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  427.619186] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:16 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:16 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x48)

20:44:16 executing program 0:
socket$inet(0x2, 0x5, 0x3)

20:44:16 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0)

[  427.631600] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  427.644786] ubi0: background thread "ubi_bgt0d" started, PID 29382
[  427.653084] ubi0: detaching mtd0
[  427.662669] ubi0: mtd0 is detached
[  427.669188] ubi0: attaching mtd0
[  427.715011] ubi0: scanning is finished
20:44:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x1d, 0xf45d89842872efd5}, 0x24}}, 0x0)

[  427.904624] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  427.918966] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  427.928828] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  427.935530] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  427.944080] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  427.952096] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  427.960105] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  427.971597] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  427.982166] ubi0: background thread "ubi_bgt0d" started, PID 29413
[  427.988818] ubi: mtd0 is already attached to ubi0
[  428.001041] ubi0: detaching mtd0
20:44:16 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:16 executing program 5:
process_vm_writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/41, 0x29}, {0x0}], 0x2, 0x0, 0x0, 0x0)

20:44:16 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote}}}})

20:44:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), 0x14)

20:44:16 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  428.008515] ubi0: mtd0 is detached
[  428.023378] ubi0: attaching mtd0
20:44:16 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)

[  428.059112] ubi0: scanning is finished
20:44:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x16, 0xf45d89842872efd5}, 0x24}}, 0x0)

[  428.239595] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  428.257153] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  428.275155] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  428.283960] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  428.293131] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  428.299512] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  428.310598] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  428.320074] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  428.329797] ubi0: background thread "ubi_bgt0d" started, PID 29445
[  428.336355] ubi0: detaching mtd0
20:44:17 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:17 executing program 0:
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r1=>0x0})
io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f00000001c0)={0x0, r1+60000000}, &(0x7f0000000240)={&(0x7f0000000200), 0x8})

20:44:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a0, &(0x7f0000000040)={@private0, 0x48, r2})

20:44:17 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x3, 0x0, &(0x7f0000000140))

[  428.342856] ubi0: mtd0 is detached
[  428.351699] ubi0: attaching mtd0
[  428.356799] ubi0: scanning is finished
20:44:17 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'ip_vti0\x00', 0x0})

[  428.435588] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  428.450940] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  428.458671] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  428.465078] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  428.480514] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  428.495387] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  428.514583] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:17 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:17 executing program 4:
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180))

20:44:17 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'sit0\x00', 0x0})

20:44:17 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  428.530808] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  428.542933] ubi0: background thread "ubi_bgt0d" started, PID 29461
[  428.556199] ubi: mtd0 is already attached to ubi0
[  428.561489] ubi: mtd0 is already attached to ubi0
20:44:17 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000280)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xa4, &(0x7f0000000300)=""/164, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  428.668645] ubi: mtd0 is already attached to ubi0
20:44:17 executing program 5:
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x13, 0x0, 0xf, 0x0, 0xddf}})

20:44:17 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5450, 0x0)

[  428.778631] ubi: mtd0 is already attached to ubi0
20:44:17 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:17 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}})

20:44:17 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/3\x00')
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))

20:44:17 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)

20:44:17 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  428.932331] ubi: mtd0 is already attached to ubi0
[  428.996105] ubi0: detaching mtd0
[  429.055152] ubi0: mtd0 is detached
[  429.069801] ubi0: attaching mtd0
[  429.073976] ubi0: scanning is finished
20:44:17 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:17 executing program 4:
pselect6(0x0, 0x0, &(0x7f000000d900), 0x0, &(0x7f000000d9c0), 0x0)

20:44:17 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000040)=0xfffffffc)

20:44:17 executing program 5:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x335c3fecf3139085)

20:44:17 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:18 executing program 5:
socketpair(0x28, 0x0, 0x0, &(0x7f0000000200))

20:44:18 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e000}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:18 executing program 0:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180), 0x8})

20:44:18 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mounts\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:18 executing program 5:
r0 = socket(0x2, 0x3, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0)

20:44:18 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0xa, 0x0, &(0x7f0000000140))

[  429.371499] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  429.389029] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  429.403363] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  429.422452] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  429.446643] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  429.468225] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  429.486583] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  429.496618] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  429.507686] ubi: mtd0 is already attached to ubi0
[  429.508629] ubi0: background thread "ubi_bgt0d" started, PID 29550
[  429.522065] ubi: mtd0 is already attached to ubi0
[  429.536052] ubi0: detaching mtd0
20:44:18 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:18 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:18 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00'})

20:44:18 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="7f", 0x1, r0)
keyctl$KEYCTL_MOVE(0x7, r1, 0xfffffffffffffffd, 0x0, 0x0)

20:44:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x5a, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:18 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

[  429.563510] ubi0: mtd0 is detached
20:44:18 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[  429.644681] ubi0: attaching mtd0
20:44:18 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)

[  429.698459] ubi0: scanning is finished
20:44:18 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000002880)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$link(0x8, 0x0, r1)

20:44:18 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x40, 0x7ff})

20:44:18 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@kfunc]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xa4, &(0x7f0000000300)=""/164, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:18 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000002880)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="05", 0x1, r2)
add_key$keyring(&(0x7f0000000500), &(0x7f0000002880)={'syz', 0x0}, 0x0, 0x0, r2)
keyctl$unlink(0x9, r1, r2)

[  429.930045] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  429.954898] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  429.974548] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  429.989764] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  429.999260] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  430.006265] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  430.014122] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  430.027257] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  430.043097] ubi0: background thread "ubi_bgt0d" started, PID 29616
[  430.050220] ubi: mtd0 is already attached to ubi0
[  430.055485] ubi: mtd0 is already attached to ubi0
[  430.061466] ubi0: detaching mtd0
[  430.068678] ubi0: mtd0 is detached
20:44:18 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:18 executing program 0:
syslog(0x4, &(0x7f0000000000)=""/160, 0xa0)

20:44:18 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)

20:44:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000202})

20:44:18 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:18 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x11, 0x4)

20:44:18 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @empty}}}})

20:44:19 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  430.186075] ubi0: attaching mtd0
[  430.195573] ubi0: scanning is finished
20:44:19 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000080)='i', 0x1)

20:44:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001100)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x0)

20:44:19 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x4, r0, 0x0, 0x0, 0x0)

[  430.382921] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  430.401242] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  430.416149] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  430.416161] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  430.416170] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  430.416179] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  430.416190] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  430.416204] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  430.499225] ubi0: background thread "ubi_bgt0d" started, PID 29672
[  430.515882] ubi: mtd0 is already attached to ubi0
[  430.524847] ubi: mtd0 is already attached to ubi0
[  430.538568] ubi0: detaching mtd0
[  430.545331] ubi0: mtd0 is detached
20:44:19 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:19 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$nbd(r0, 0x0, 0x1c)

20:44:19 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/6)

20:44:19 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x14, 0x0, &(0x7f0000000140))

20:44:19 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)

20:44:19 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:19 executing program 4:
rt_sigtimedwait(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000fc0))

20:44:19 executing program 5:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000010c0))

20:44:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0)

[  430.670179] ubi0: attaching mtd0
[  430.718894] ubi0: scanning is finished
20:44:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x2e, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:19 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

20:44:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}})

[  430.911273] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  430.921753] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  430.931547] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  430.941236] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  430.951563] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  430.962240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  430.974733] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  430.992420] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  431.003192] ubi0: background thread "ubi_bgt0d" started, PID 29731
[  431.003516] ubi: mtd0 is already attached to ubi0
[  431.017161] ubi: mtd0 is already attached to ubi0
[  431.024715] ubi0: detaching mtd0
[  431.030351] ubi0: mtd0 is detached
20:44:19 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:19 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8995, &(0x7f00000000c0)={'sit0\x00', 0x0})

20:44:19 executing program 5:
getresgid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f00000042c0))

20:44:19 executing program 0:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f000000d180)={0x0, 0x3938700}, &(0x7f000000d200)={&(0x7f000000d1c0), 0x8})

20:44:19 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)

20:44:19 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:19 executing program 5:
r0 = socket$inet(0xa, 0x1, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_to_hsr\x00', 0xffff8001})

20:44:19 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x10, 0x4)

[  431.143533] ubi0: attaching mtd0
[  431.153767] ubi0: scanning is finished
20:44:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x42, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:20 executing program 4:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0})

[  431.213459] veth1_to_hsr: mtu less than device minimum
20:44:20 executing program 5:
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)=ANY=[])
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000007c0)={0x20}, 0x20)

20:44:20 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0x10, r0, 0x0)

[  431.317565] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  431.328401] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  431.335116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  431.344652] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  431.358833] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  431.365388] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  431.405815] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  431.415460] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  431.428845] ubi0: background thread "ubi_bgt0d" started, PID 29777
[  431.429365] ubi: mtd0 is already attached to ubi0
[  431.440390] ubi: mtd0 is already attached to ubi0
[  431.445407] ubi0: detaching mtd0
[  431.465474] ubi0: mtd0 is detached
20:44:20 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}})

20:44:20 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'})

20:44:20 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00')
read$FUSE(r0, 0x0, 0x0)

20:44:20 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)

20:44:20 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:20 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4b4c, 0x0)

20:44:20 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3f)

20:44:20 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="03000000000000000700000000000400060000007805a572747d3a0b00000000f88a000000000000000000000100000021e00000030000007f000000070000000000000000", @ANYRESDEC, @ANYBLOB="e3f1d9796174e07d05da3c7462b9d6499140390457e28cfd16e682965e954f6e6806a121be22696878a53e480c3122779d7c3d2683d1246505e87aa664effd2e0d464371c73c4d6c47c6ee4b30e03454b22a2cb2f20e842c571c52656bf960529e23630b8231c1efb55ea37d194af9c02eaf8a463caab9f624b7c59d2078393a29d4fb21738f5949f6a3494afd4563c087b12fe39cd7be414da2e44289235cc1bb1b70c76130a088a2067d98cc330c3a3a7766f0ef9d8d8535f09ea4e934521cc8c069035a6e7e45915ddee12dbf01d48253150b6a8231119d4f311f9fe1c6"])
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
bind$pptp(r0, 0x0, 0x1e00)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0)

[  431.607823] ubi0: attaching mtd0
20:44:20 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c0f, 0xc)

[  431.641235] ubi0: scanning is finished
20:44:20 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/slabinfo\x00', 0x0, 0x0)

20:44:20 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x1a, 0x0, &(0x7f0000000140))

[  431.834031] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  431.847425] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  431.854127] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  431.868900] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  431.876506] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  431.892286] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  431.902736] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  431.935166] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  431.946108] ubi0: background thread "ubi_bgt0d" started, PID 29845
[  431.953053] ubi: mtd0 is already attached to ubi0
[  431.959596] ubi: mtd0 is already attached to ubi0
[  431.965071] ubi0: detaching mtd0
[  431.982443] ubi0: mtd0 is detached
20:44:20 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@mcast1, 0x0, r2})

20:44:20 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})

20:44:20 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffd, 0x0, 0x0)

20:44:20 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:20 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x60)

20:44:20 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

[  432.098151] ubi0: attaching mtd0
20:44:20 executing program 5:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x80802, 0x0)

20:44:20 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b4c, &(0x7f0000000000))

[  432.134904] ubi0: scanning is finished
20:44:20 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:21 executing program 5:
syz_open_procfs(0x0, &(0x7f0000001680)='net/udp6\x00')

20:44:21 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)

[  432.326788] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  432.347762] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  432.358678] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  432.365287] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  432.374654] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  432.381890] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  432.391674] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  432.411865] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:21 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:21 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @remote}}, 0x1e)

20:44:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000140)=ANY=[]})

20:44:21 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:21 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)

[  432.423845] ubi0: background thread "ubi_bgt0d" started, PID 29900
[  432.432169] ubi: mtd0 is already attached to ubi0
[  432.437767] ubi: mtd0 is already attached to ubi0
[  432.443647] ubi0: detaching mtd0
[  432.453607] ubi0: mtd0 is detached
20:44:21 executing program 0:
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socketpair(0xa, 0x0, 0x0, &(0x7f0000000880))

20:44:21 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0)

20:44:21 executing program 5:
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
timerfd_gettime(r0, 0x0)

[  432.576346] audit: type=1326 audit(1672865061.326:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29895 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc68d6900c9 code=0x0
[  432.579191] ubi0: attaching mtd0
[  432.660893] ubi0: scanning is finished
20:44:21 executing program 4:
process_vm_writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)

20:44:21 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4b3a, 0x0)

20:44:21 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:21 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000040)={@private0})

[  432.958833] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  432.966209] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  432.973232] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  432.980996] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  432.988737] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  432.994839] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:21 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:21 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @none, 0x0, 0x1}, 0xe)

20:44:21 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:21 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  433.003467] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  433.017454] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  433.027070] ubi0: background thread "ubi_bgt0d" started, PID 29953
[  433.031362] ubi: mtd0 is already attached to ubi0
[  433.038396] ubi: mtd0 is already attached to ubi0
[  433.049093] ubi0: detaching mtd0
[  433.053515] ubi0: mtd0 is detached
20:44:21 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)

20:44:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@private0, 0x0, r2})

[  433.132510] ubi0: attaching mtd0
20:44:21 executing program 0:
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x77359400}, 0x8)
clock_gettime(0x0, &(0x7f0000000540))
inotify_rm_watch(0xffffffffffffffff, 0x0)
stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00))

20:44:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x801)

20:44:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@private0, 0x48, r2})

[  433.172490] ubi0: scanning is finished
20:44:22 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='io\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'sit0\x00', 0x0})

20:44:22 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}, 'wg0\x00'})

[  433.446049] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  433.469192] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  433.483994] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  433.492073] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  433.499489] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  433.506035] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  433.514222] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  433.533023] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  433.543628] ubi: mtd0 is already attached to ubi0
[  433.544747] ubi0: background thread "ubi_bgt0d" started, PID 30004
[  433.549203] ubi: mtd0 is already attached to ubi0
[  433.561736] ubi0: detaching mtd0
[  433.567248] ubi0: mtd0 is detached
20:44:22 executing program 5:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="0e", 0x1, r0)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="7f", 0x1, r0)
keyctl$KEYCTL_MOVE(0x11, r1, 0xfffffffffffffffd, 0x0, 0x0)

20:44:22 executing program 4:
getresuid(&(0x7f0000000080), 0x0, 0x0)

20:44:22 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:22 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x60)

20:44:22 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:22 executing program 5:
getgroups(0x2, &(0x7f0000002040)=[0xee01, 0xffffffffffffffff])

[  433.671714] ubi0: attaching mtd0
[  433.710363] ubi0: scanning is finished
[  433.850875] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  433.858276] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  433.864903] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  433.872838] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  433.880787] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  433.887286] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  433.894602] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  433.904201] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  433.914032] ubi0: background thread "ubi_bgt0d" started, PID 30045
[  433.914096] ubi: mtd0 is already attached to ubi0
[  433.927346] ubi: mtd0 is already attached to ubi0
[  433.933511] ubi0: detaching mtd0
[  433.944394] ubi0: mtd0 is detached
20:44:22 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b4a, &(0x7f0000000000))

20:44:22 executing program 4:
keyctl$KEYCTL_PKEY_ENCRYPT(0xe, &(0x7f0000000100), 0x0, 0x0, 0x0)

20:44:22 executing program 5:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0)

20:44:22 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)

20:44:22 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:22 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:22 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x5606, 0x0)

20:44:22 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$eventfd(r0, 0x0, 0x0)

[  434.121961] ubi0: attaching mtd0
20:44:22 executing program 0:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$FUSE_IOCTL(r0, &(0x7f00000007c0)={0x20}, 0xffffff10)

[  434.166680] ubi0: scanning is finished
20:44:23 executing program 5:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]})

20:44:23 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
io_setup(0x6, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040)="008cbf2115f857d439", 0x9}])

[  434.345274] overlayfs: './file0' not a directory
20:44:23 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd/3\x00')

20:44:23 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/raw6\x00')
read$eventfd(r0, 0x0, 0x0)

[  434.399770] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  434.419886] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  434.440314] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
20:44:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x1a, 0xf45d89842872efd5}, 0x24}}, 0x0)

[  434.474224] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  434.489286] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  434.509708] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:23 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[], [{@measure}]})

[  434.524634] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  434.556115] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  434.567863] ubi0: background thread "ubi_bgt0d" started, PID 30103
[  434.585713] ubi: mtd0 is already attached to ubi0
[  434.593621] ubi: mtd0 is already attached to ubi0
[  434.600670] ubi0: detaching mtd0
[  434.610987] ubi0: mtd0 is detached
20:44:23 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)

20:44:23 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0xf5e785b, 0x0, 0x0, "c4f829ed879a03f323b6b069ae854e7bd28f45"})

20:44:23 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:23 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:23 executing program 4:
pkey_free(0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x46, r2})
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002300)={&(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x223c}, 0x1, 0x0, 0x0, 0x40080}, 0x24040001)

[  434.742178] ubi0: attaching mtd0
[  434.823769] ubi0: scanning is finished
20:44:23 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRES64, @ANYRESDEC])
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
creat(0x0, 0x0)

20:44:23 executing program 4:
keyctl$search(0xa, 0x0, &(0x7f0000000080)='keyring\x00', 0x0, 0xfffffffffffffff8)

20:44:23 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00')
read$eventfd(r0, 0x0, 0x0)

[  434.993785] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  435.017423] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  435.037655] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
20:44:23 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'macvtap0\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "bb1718c93cfa3e061f524307eeee08cf58cc390ca8873e361bd983c73b3b"}}}, {{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

20:44:23 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
read$eventfd(r0, 0x0, 0x0)

[  435.060617] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  435.104254] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  435.131132] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:23 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'sit0\x00', 0x0})
r0 = eventfd(0xffff6f7a)
read$eventfd(r0, &(0x7f0000000040), 0x8)

[  435.154598] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  435.183997] x_tables: duplicate underflow at hook 3
20:44:24 executing program 5:
add_key$fscrypt_provisioning(&(0x7f0000000040), 0xfffffffffffffffc, 0x0, 0x0, 0x0)

[  435.212476] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  435.238269] ubi0: background thread "ubi_bgt0d" started, PID 30150
[  435.244987] ubi: mtd0 is already attached to ubi0
[  435.256190] ubi: mtd0 is already attached to ubi0
[  435.262053] ubi0: detaching mtd0
[  435.270532] ubi0: mtd0 is detached
20:44:24 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60)

20:44:24 executing program 5:
mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x0, &(0x7f0000000d40))

20:44:24 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'})

20:44:24 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b32, &(0x7f0000000000))

20:44:24 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:24 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:24 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000d840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d800)}, 0x80)

20:44:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffc90000000000}, 0x0)

20:44:24 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f0000001840))

[  435.386885] ubi0: attaching mtd0
[  435.402803] ubi0: scanning is finished
20:44:24 executing program 5:
r0 = socket(0x2, 0x3, 0x4)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x4000085)

20:44:24 executing program 4:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8937, &(0x7f0000000080)={'wg1\x00'})

20:44:24 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
inotify_rm_watch(r0, 0x0)

[  435.550272] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  435.560175] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  435.585259] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  435.624665] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  435.660583] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  435.709604] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  435.720715] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  435.732173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  435.742690] ubi0: background thread "ubi_bgt0d" started, PID 30217
[  435.742864] ubi: mtd0 is already attached to ubi0
20:44:24 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)

20:44:24 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b4d, &(0x7f0000000000))

20:44:24 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
bind$pptp(r0, 0x0, 0x1e00)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r4, 0x9, 0x80000})
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000007c0)={0x20}, 0x20)

20:44:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc008ae88, 0x0)

20:44:24 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:24 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  435.755979] ubi: mtd0 is already attached to ubi0
[  435.760982] ubi0: detaching mtd0
[  435.766436] ubi0: mtd0 is detached
20:44:24 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}})

20:44:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5421, 0x0)

[  435.874766] ubi0: attaching mtd0
20:44:24 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00')
read$eventfd(r0, 0x0, 0x0)

[  435.914899] ubi0: scanning is finished
20:44:24 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB])
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
bind$pptp(0xffffffffffffffff, 0x0, 0x1e00)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x9})

20:44:24 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000002440)='auxv\x00')
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x0)

20:44:24 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$nbd(r0, &(0x7f0000000040)=ANY=[], 0x1c)

[  436.139434] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  436.150962] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  436.160636] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  436.175910] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  436.183253] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  436.197036] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  436.211416] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  436.221820] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  436.232056] ubi0: background thread "ubi_bgt0d" started, PID 30286
[  436.232982] ubi: mtd0 is already attached to ubi0
20:44:25 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)

20:44:25 executing program 4:
time(&(0x7f0000001000))

20:44:25 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x540c, 0x0)

20:44:25 executing program 5:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0)

20:44:25 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:25 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  436.245034] ubi: mtd0 is already attached to ubi0
[  436.250768] ubi0: detaching mtd0
[  436.258308] ubi0: mtd0 is detached
20:44:25 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x0)

[  436.348347] ubi0: attaching mtd0
20:44:25 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x81, 0xf08})

20:44:25 executing program 0:
io_setup(0x47fa, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)

[  436.373132] ubi0: scanning is finished
20:44:25 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5601, &(0x7f0000000000))

20:44:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}})

20:44:25 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x15, r0, 0xfffffffffffffffd, 0x0, 0x0)

[  436.565298] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  436.577546] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  436.592213] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  436.609567] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  436.631927] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  436.638769] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  436.647840] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  436.670751] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  436.681627] ubi0: background thread "ubi_bgt0d" started, PID 30334
[  436.688938] ubi: mtd0 is already attached to ubi0
[  436.700662] ubi: mtd0 is already attached to ubi0
[  436.706919] ubi0: detaching mtd0
20:44:25 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x40000d02)

20:44:25 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0)
ioctl$sock_bt_hci(r0, 0x400448df, 0x0)

20:44:25 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:25 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  436.718064] ubi0: mtd0 is detached
20:44:25 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

20:44:25 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000"], 0x60)

20:44:25 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000d840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  436.819418] ubi0: attaching mtd0
20:44:25 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000880))

20:44:25 executing program 0:
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)

[  436.858685] ubi0: scanning is finished
20:44:25 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)

20:44:25 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000200)='./file0\x00', 0x0, 0x801840, 0x0)

20:44:25 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)

20:44:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x25, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:25 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

[  437.100716] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  437.128889] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  437.141347] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  437.150255] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  437.161653] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  437.170091] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  437.182360] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  437.195247] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  437.212576] ubi0: background thread "ubi_bgt0d" started, PID 30395
[  437.219777] ubi: mtd0 is already attached to ubi0
[  437.225187] ubi: mtd0 is already attached to ubi0
[  437.233004] ubi0: detaching mtd0
[  437.247608] ubi0: mtd0 is detached
20:44:26 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:26 executing program 0:
r0 = socket$inet(0xa, 0x3, 0x3)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

20:44:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

20:44:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000080))
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x6c, r2})

20:44:26 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:26 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)

20:44:26 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000100))

20:44:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)="6942d8fc", 0x4)

[  437.374575] ubi0: attaching mtd0
20:44:26 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, "4a19b86081cd656a1c94520e2c8052863eefea81fe13dc7731d4ec5aeda0824d5750a48ebf8be671b009a592d24178b8c8d8a8c14f853c5d1902adc316fa74a0"}, 0x48, 0xffffffffffffffff)
keyctl$read(0x2, r0, 0x0, 0x0)

20:44:26 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'os2.', '&**\x00'})

[  437.410387] ubi0: scanning is finished
20:44:26 executing program 5:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00')

20:44:26 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x8, 0x0, &(0x7f0000000140))

[  437.653179] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  437.660469] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  437.668204] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  437.675083] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  437.682807] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  437.690151] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  437.702173] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  437.712269] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  437.725090] ubi0: background thread "ubi_bgt0d" started, PID 30452
[  437.725264] ubi: mtd0 is already attached to ubi0
[  437.738188] ubi: mtd0 is already attached to ubi0
[  437.744475] ubi0: detaching mtd0
20:44:26 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:26 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000440)={0x0, 0x0, 0x0})
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))

20:44:26 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000000)=0x8000001e)

20:44:26 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

20:44:26 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:26 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)

[  437.751462] ubi0: mtd0 is detached
20:44:26 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x17, 0x0, &(0x7f0000000140))

20:44:26 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KDGETMODE(r0, 0x400448ca, 0x0)

20:44:26 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8918, 0x0)

[  437.864667] ubi0: attaching mtd0
[  437.902649] ubi0: scanning is finished
20:44:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14}, 0x24}}, 0x0)

20:44:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0)

20:44:26 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8}, 0x10)

[  438.081488] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  438.088612] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  438.095159] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  438.103254] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  438.111089] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  438.117785] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  438.125151] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  438.135651] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  438.150688] ubi0: background thread "ubi_bgt0d" started, PID 30504
[  438.157681] ubi: mtd0 is already attached to ubi0
[  438.162689] ubi: mtd0 is already attached to ubi0
[  438.178794] ubi0: detaching mtd0
[  438.187343] ubi0: mtd0 is detached
20:44:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x5e, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:27 executing program 0:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x4}, &(0x7f00000000c0), 0x0)

20:44:27 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}, 0xc)

20:44:27 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f0004000000000000000600000000000000090000000000000006000000000000000100000000000000010000"], 0x60)

20:44:27 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:27 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:27 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x30, 0xf)

20:44:27 executing program 4:
r0 = eventfd2(0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

20:44:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}})

[  438.328392] ubi0: attaching mtd0
[  438.357326] ubi0: scanning is finished
20:44:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @multicast1, @multicast1}}}})

20:44:27 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4)

20:44:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}})

[  438.475629] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  438.489280] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  438.509766] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
20:44:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}})

20:44:27 executing program 0:
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

20:44:27 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))

[  438.530147] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  438.563934] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  438.581403] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  438.609078] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  438.624964] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:27 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)

20:44:27 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "6158b3"})

20:44:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}})

20:44:27 executing program 4:
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0)

20:44:27 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:27 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  438.660286] ubi0: background thread "ubi_bgt0d" started, PID 30553
[  438.660451] ubi: mtd0 is already attached to ubi0
[  438.673021] ubi: mtd0 is already attached to ubi0
[  438.678238] ubi0: detaching mtd0
[  438.683878] ubi0: mtd0 is detached
20:44:27 executing program 5:
r0 = socket(0x2, 0xa, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0)

20:44:27 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)

20:44:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4b30, 0x0)

[  438.806047] ubi0: attaching mtd0
[  438.881407] ubi0: scanning is finished
20:44:27 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:27 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, 0x0)

20:44:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}}}})

[  439.073122] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  439.086909] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  439.093798] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  439.102238] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  439.115419] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  439.121555] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  439.129538] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  439.139084] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  439.149435] ubi0: background thread "ubi_bgt0d" started, PID 30623
[  439.152271] ubi: mtd0 is already attached to ubi0
20:44:27 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)

20:44:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newtclass={0x38, 0x28, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @tclass_kind_options=@c_atm={{0x8}, {0x4}}]}, 0x38}}, 0x0)

20:44:27 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x1}, 0x48)

20:44:27 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private, {[@ra={0x94, 0x4}]}}}}})

20:44:27 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  439.171032] ubi: mtd0 is already attached to ubi0
[  439.177865] ubi0: detaching mtd0
[  439.185115] ubi0: mtd0 is detached
20:44:28 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:28 executing program 4:
keyctl$search(0xa, 0x0, &(0x7f00000000c0)='.request_key_auth\x00', 0x0, 0x0)

20:44:28 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="05", 0x1, r0)

[  439.282423] ubi0: attaching mtd0
20:44:28 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4bfb, 0x0)

[  439.325137] ubi0: scanning is finished
20:44:28 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$setperm(0x5, r0, 0x50014)
add_key$keyring(&(0x7f0000000500), &(0x7f0000002880)={'syz', 0x0}, 0x0, 0x0, r0)

20:44:28 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/3\x00')
read$eventfd(r0, 0x0, 0x10000000000000)

20:44:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0xf45d89842872efd5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0)

[  439.535549] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  439.542529] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  439.556271] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  439.562710] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  439.617547] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  439.623695] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  439.634775] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  439.648618] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  439.660557] ubi0: background thread "ubi_bgt0d" started, PID 30671
20:44:28 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000"], 0x60)

20:44:28 executing program 0:
r0 = eventfd(0x8)
read$eventfd(r0, 0x0, 0x42)

20:44:28 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

20:44:28 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x11, 0x4)

[  439.660681] ubi: mtd0 is already attached to ubi0
[  439.672142] ubi: mtd0 is already attached to ubi0
[  439.677393] ubi0: detaching mtd0
[  439.685107] ubi0: mtd0 is detached
20:44:28 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:28 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:28 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2010, 0x0)

20:44:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001200e984a34697a19d8da11101"], 0x50}}, 0x0)

20:44:28 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}}}})

[  439.802347] ubi0: attaching mtd0
[  439.844493] ubi0: scanning is finished
20:44:28 executing program 4:
process_vm_writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/41, 0x29}], 0x1, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, 0x0)

20:44:28 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

20:44:28 executing program 5:
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xfffffffffffffffd)

[  439.914227] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'.
[  440.064321] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  440.073263] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  440.131443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  440.138026] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  440.159302] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  440.165858] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:29 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)

20:44:29 executing program 5:
r0 = eventfd2(0x1, 0x0)
read$eventfd(r0, &(0x7f0000000440), 0x8)

20:44:29 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

20:44:29 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='stack\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:29 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:29 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  440.173267] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  440.182921] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  440.192932] ubi: mtd0 is already attached to ubi0
[  440.192942] ubi0: background thread "ubi_bgt0d" started, PID 30724
[  440.204935] ubi: mtd0 is already attached to ubi0
[  440.210154] ubi0: detaching mtd0
[  440.219122] ubi0: mtd0 is detached
20:44:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001400)={&(0x7f00000011c0), 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0x15, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3eb}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x37fe0}}, 0x0)

20:44:29 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5452, &(0x7f0000000040)={@private0})

20:44:29 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x0, 0x0, 0x0, 0x800}, 0x48)

[  440.334317] ubi0: attaching mtd0
[  440.378069] ubi0: scanning is finished
20:44:29 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14}, 0x48)

20:44:29 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
write$bt_hci(r0, 0x0, 0x0)

20:44:29 executing program 4:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0))
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

[  440.541460] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  440.553857] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  440.569118] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  440.576131] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  440.599702] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  440.613673] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  440.635918] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:29 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)

20:44:29 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000100)='attr/fscreate\x00')

20:44:29 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', 0x0})

20:44:29 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

20:44:29 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  440.651410] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  440.662015] ubi0: background thread "ubi_bgt0d" started, PID 30773
[  440.664575] ubi: mtd0 is already attached to ubi0
[  440.674064] ubi: mtd0 is already attached to ubi0
[  440.680654] ubi0: detaching mtd0
[  440.686590] ubi0: mtd0 is detached
20:44:29 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:29 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x80, 0x0, 0x0, @broadcast, @remote, {[@end, @end, @ssrr={0x89, 0x17, 0x0, [@local, @multicast1, @multicast1, @local, @dev]}, @lsrr={0x83, 0x7, 0x0, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}]}, @end]}}}}})

20:44:29 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
bind$pptp(r0, 0x0, 0x1e00)
creat(0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)

[  440.802542] ubi0: attaching mtd0
20:44:29 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$FUSE_STATFS(r0, 0x0, 0x0)

[  440.842118] ubi0: scanning is finished
20:44:29 executing program 4:
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0)

20:44:29 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000f00)={&(0x7f0000000e40), 0xffffffffffffff0d, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x7}}, 0x0)

20:44:29 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="03000000000000000700000000000400060000007805a572747d3a0b00000000f88a000000000000000000000100000021e00000030000007f00000007000000000000000000000000000000803a0023030000000000000004000000000000000000000000000000c369e00a47c7dc3e2b3f0c74056d2db4554681c0fe20d1", @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="e3f1d9796174e07d05da3c7462b9d6499140390457e28cfd16e682965e954f6e6806a121be22696878a53e480c3122779d7c3d2683d1246505e87aa664effd2e0d464371c73c4d6c47c6ee4b30e03454b22a2cb2f20e842c571c52656bf960529e23630b8231c1efb55ea37d194af9c02eaf8a463caab9f624b7c59d2078393a29d4fb21738f5949f6a3494afd4563c087b12fe39cd7be414da2e44289235cc1bb1b70c76130a088a2067d98cc330c3a3a7766f0ef9d8d8535f09ea4e934521cc8c069035a6e7e45915ddee12dbf01d48253150b6a8231119d4f311f9fe1c65ef86130b38d9b62567de4c7be39"])
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
bind$pptp(r0, 0x0, 0x1e00)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000007c0)={0x20}, 0x20)

[  441.095456] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  441.102481] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  441.113122] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  441.120912] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  441.130342] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  441.138466] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  441.151939] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  441.171150] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  441.182302] ubi0: background thread "ubi_bgt0d" started, PID 30831
[  441.182582] ubi: mtd0 is already attached to ubi0
20:44:30 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000"], 0x60)

20:44:30 executing program 0:
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x745b3c27cdd6c28e)

20:44:30 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:30 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:30 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x94bc41, 0x0)

20:44:30 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x5, 0xac, &(0x7f00000003c0)=""/172, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff})

[  441.197437] ubi: mtd0 is already attached to ubi0
[  441.203622] ubi0: detaching mtd0
[  441.222773] ubi0: mtd0 is detached
[  441.267070] ieee802154 phy0 wpan0: encryption failed: -22
[  441.272767] ieee802154 phy1 wpan1: encryption failed: -22
20:44:30 executing program 0:
socketpair(0xb, 0x0, 0x0, &(0x7f0000000100))

20:44:30 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0)

20:44:30 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x1)
getsockopt$inet_pktinfo(r0, 0x6, 0x4, 0x0, 0x0)

[  441.365622] ubi0: attaching mtd0
[  441.381161] ubi0: scanning is finished
20:44:30 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x6, &(0x7f0000000a40)=@framed={{}, [@generic={0x7f}, @map_idx]}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x1000, &(0x7f0000001380)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:30 executing program 4:
socket$pptp(0x18, 0x1, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
creat(0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0)

20:44:30 executing program 0:
pselect6(0x40, &(0x7f00000015c0), &(0x7f0000001600)={0x8}, 0x0, &(0x7f0000001680)={0x77359400}, &(0x7f0000001700)={&(0x7f00000016c0)={[0x68eec4e5]}, 0x8})

[  441.583521] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  441.591743] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  441.600356] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  441.632939] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  441.639981] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  441.647513] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  441.656632] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  441.667210] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:30 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)

20:44:30 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @remote}}, 0xffffffffffffff56)

20:44:30 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@metacopy_off}, {@index_on}, {@nfs_export_off}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_on}]})

20:44:30 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00')
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)

20:44:30 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:30 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  441.677347] ubi0: background thread "ubi_bgt0d" started, PID 30892
[  441.693906] ubi: mtd0 is already attached to ubi0
[  441.707874] ubi: mtd0 is already attached to ubi0
[  441.713143] ubi0: detaching mtd0
[  441.720445] ubi0: mtd0 is detached
20:44:30 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa8, 0x0)

20:44:30 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

20:44:30 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)

[  441.822500] ubi0: attaching mtd0
[  441.829891] overlayfs: bad mount option "redirect_dir=./file0"
[  441.840342] ubi0: scanning is finished
20:44:30 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)

20:44:30 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x81})

20:44:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040000)

[  441.965684] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  441.981908] overlayfs: bad mount option "redirect_dir=./file0"
[  442.004757] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  442.035536] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  442.048216] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  442.067896] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  442.074113] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  442.082946] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  442.093398] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  442.115324] ubi0: background thread "ubi_bgt0d" started, PID 30935
[  442.121735] ubi: mtd0 is already attached to ubi0
20:44:30 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)

20:44:30 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0)

20:44:30 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x5424, 0x0)

20:44:30 executing program 4:
socketpair(0x64, 0x0, 0x0, &(0x7f0000000200))

20:44:30 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:30 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  442.147710] ubi: mtd0 is already attached to ubi0
[  442.152844] ubi0: detaching mtd0
[  442.161426] ubi0: mtd0 is detached
20:44:31 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x15, 0x225}, 0x14}}, 0x0)

20:44:31 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0})

20:44:31 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f00000000c0)=@raw=[@func, @exit, @map_idx], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0}, 0x80)

[  442.274888] ubi0: attaching mtd0
[  442.316397] ubi0: scanning is finished
20:44:31 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0xfb6, 0x0, 0x4}, 0xc)

20:44:31 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8901, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}})

20:44:31 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1c, r0, 0xfffffffffffffffd, 0x0, 0x0)

[  442.525668] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  442.539977] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  442.548789] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  442.561156] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  442.569310] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  442.580649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  442.588762] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  442.598456] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  442.609810] ubi0: background thread "ubi_bgt0d" started, PID 30999
[  442.610163] ubi: mtd0 is already attached to ubi0
[  442.622076] ubi: mtd0 is already attached to ubi0
20:44:31 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100000000000000"], 0x60)

20:44:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000040)={@private0, 0x48, r2})

20:44:31 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89b1, &(0x7f0000000080)={'wg1\x00'})

20:44:31 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}, @dead_binder_done], 0x1, 0x0, &(0x7f0000000100)="f5"})

20:44:31 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:31 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  442.628499] ubi0: detaching mtd0
[  442.634148] ubi0: mtd0 is detached
20:44:31 executing program 5:
io_setup(0x1, &(0x7f00000000c0))

[  442.740544] ubi0: attaching mtd0
20:44:31 executing program 4:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0x0, 0x0, 0x0)

[  442.776697] ubi0: scanning is finished
20:44:31 executing program 0:
socketpair(0x21, 0x0, 0x0, &(0x7f0000000200))

20:44:31 executing program 4:
epoll_wait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0x0)

20:44:31 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000040)=0xffffffff)

20:44:31 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/ram4', 0x40, 0x0)

[  442.976710] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  442.993121] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  443.003928] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  443.013705] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  443.022094] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  443.037780] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  443.062411] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:31 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)

20:44:31 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={0x0}}, 0x11)

20:44:31 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x15, 0x0, &(0x7f0000000140))

20:44:31 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000a80)='GPL\x00', 0x7, 0x1000, &(0x7f0000001380)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00), 0x10}, 0x80)

20:44:31 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:31 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  443.073649] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  443.083904] ubi0: background thread "ubi_bgt0d" started, PID 31050
[  443.084008] ubi: mtd0 is already attached to ubi0
[  443.095845] ubi: mtd0 is already attached to ubi0
[  443.101914] ubi0: detaching mtd0
[  443.107250] ubi0: mtd0 is detached
20:44:32 executing program 5:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

20:44:32 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x500}, 0x0)

[  443.214524] ubi0: attaching mtd0
20:44:32 executing program 4:
socket(0x1, 0x4, 0x0)

[  443.265886] ubi0: scanning is finished
20:44:32 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="f5"})

20:44:32 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x0, 0x0, 0x0, 0x400}, 0x48)

20:44:32 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x38}, 0x48, r2})

[  443.480458] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  443.487718] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  443.501602] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  443.509012] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  443.517066] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  443.523559] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:32 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)

20:44:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0)

20:44:32 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'sit0\x00', 0x0})

20:44:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, r2})

[  443.532302] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  443.543266] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  443.554012] ubi: mtd0 is already attached to ubi0
[  443.554419] ubi0: background thread "ubi_bgt0d" started, PID 31102
[  443.564937] ubi: mtd0 is already attached to ubi0
[  443.572295] ubi0: detaching mtd0
[  443.578234] ubi0: mtd0 is detached
20:44:32 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r7, 0x0, r3, 0xf)

20:44:32 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r6, 0x0, r2, 0xf)

20:44:32 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0x4)

20:44:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "3d9086fe84d0f356", "2410268901ecfa81dc10d18f51c842f891e6cce0ae6db71ea643f303f46d0e5e", "428e57fa", "c5d4839796d3a13d"}, 0x38)

[  443.680192] ubi0: attaching mtd0
20:44:32 executing program 4:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x0)

[  443.713509] ubi0: scanning is finished
20:44:32 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000002880)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$setperm(0x5, r1, 0x0)

20:44:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x805}, 0x14}}, 0x0)

20:44:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getroute={0x14, 0x1a, 0x1}, 0x14}}, 0x0)

[  443.982795] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  443.990036] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  443.997443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  444.009535] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  444.016514] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  444.022664] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:32 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b00000000000001000000000000000000"], 0x60)

20:44:32 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8971, &(0x7f0000000080)={'wg1\x00'})

20:44:32 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x14, 0x225}, 0x14}}, 0x0)

20:44:32 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xf, r0, 0xfffffffffffffffd, 0x0, 0x0)

[  444.031929] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  444.041548] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  444.051027] ubi0: background thread "ubi_bgt0d" started, PID 31153
[  444.051187] ubi: mtd0 is already attached to ubi0
[  444.063441] ubi: mtd0 is already attached to ubi0
[  444.068497] ubi0: detaching mtd0
[  444.078596] ubi0: mtd0 is detached
20:44:32 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r7, 0x0, r3, 0xf)

20:44:32 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r6, 0x0, r2, 0xf)

20:44:32 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x5603, 0x0)

[  444.146453] ubi0: attaching mtd0
[  444.173264] ubi0: scanning is finished
20:44:33 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}, @dead_binder_done, @decrefs], 0x1, 0x0, &(0x7f0000000100)="f5"})

20:44:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}})

20:44:33 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x0, 0x1, &(0x7f00000001c0)="b6"})

20:44:33 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$eventfd(r0, 0x0, 0x0)

20:44:33 executing program 0:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffd, r0, 0x0)

[  444.424313] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  444.434715] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  444.449842] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  444.458189] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  444.466294] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  444.472945] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  444.492447] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  444.502746] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  444.515242] ubi0: background thread "ubi_bgt0d" started, PID 31199
20:44:33 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000))

20:44:33 executing program 5:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffff9, 0x0)

20:44:33 executing program 4:
keyctl$KEYCTL_PKEY_ENCRYPT(0x18, 0x0, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'crct10dif-arm64-ce\x00'}}, 0x0, 0x0)

20:44:33 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2}, @sadb_key={0x1}]}, 0x38}}, 0x0)

[  444.521818] ubi: mtd0 is already attached to ubi0
[  444.528319] ubi: mtd0 is already attached to ubi0
[  444.534025] ubi0: detaching mtd0
[  444.540873] ubi0: mtd0 is detached
20:44:33 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r7, 0x0, r3, 0xf)

20:44:33 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(0x0, r6, 0x0, r2, 0xf)

20:44:33 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0)

20:44:33 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x14}, 0xff9a}}, 0x0)

20:44:33 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x0)
ioctl$EVIOCGABS20(r0, 0x80184560, 0x0)

20:44:33 executing program 4:
pselect6(0x40, &(0x7f00000004c0), &(0x7f0000000500)={0x2}, 0x0, &(0x7f0000000580), 0x0)

[  444.694056] ubi0: attaching mtd0
20:44:33 executing program 0:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f000000d9c0), &(0x7f000000da40)={&(0x7f000000da00), 0x8})

20:44:33 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000080))

[  444.728362] ubi0: scanning is finished
20:44:33 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20:44:33 executing program 4:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000000040)='\a', 0x1, r0)
keyctl$unlink(0x9, r0, r0)

20:44:33 executing program 0:
r0 = socket(0x2, 0x3, 0x4)
accept4$tipc(r0, 0x0, 0x0, 0x0)

20:44:33 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4b52, 0x0)

[  444.978997] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  444.987166] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  444.993891] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  445.008612] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  445.020164] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
20:44:33 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:33 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)

20:44:33 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001400)={&(0x7f00000011c0), 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0x15, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3f7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x37fe0}}, 0x0)

20:44:33 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]})

20:44:33 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  445.027183] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  445.034672] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  445.045475] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  445.054791] ubi0: background thread "ubi_bgt0d" started, PID 31256
[  445.057449] ubi: mtd0 is already attached to ubi0
[  445.066124] ubi0: detaching mtd0
[  445.070554] ubi0: mtd0 is detached
20:44:33 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0xffffff13, 0x4)

20:44:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001040)={&(0x7f00000006c0), 0xc, &(0x7f0000001000)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001400)={&(0x7f00000011c0), 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0x15, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x37fe0}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@private0, 0x48, r3})

[  445.178016] ubi0: attaching mtd0
20:44:33 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0xa}, 0x0)

[  445.212684] ubi0: scanning is finished
20:44:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x14, r2})

20:44:34 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b4a, 0x0)

[  445.331238] audit: type=1326 audit(1672865074.097:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31263 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77af9d30c9 code=0x0
20:44:34 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000000c0)={0x10}, 0x10}], 0x1, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

[  445.514347] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  445.522810] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  445.531190] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  445.538820] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  445.546643] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  445.552942] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:34 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:34 executing program 5:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)='-()-\\\x00)\xa8\x88=\xf4\x13e\xa6\x19\xed\xba-\x88y_\x94\xdd\xcc\x83\xd1\x88\x8d\xe9L\xe03@\xbfJr\xbbD][\x12b\x8e\x02\x90\x03}\x17po\x1c\xd2(\xae\xe1\xb2s\xd9\xbc\x91\x1d\x9fi\xa4\r\xe6tH\xec\xe8\xe0${\xd2\x9bT\x96\xb84\xef\xcb\xdct\x94\xc1\xb5\xdfr\x9e\t\xa9\xf7\xea\x89\xcfK\x9dn\x12\x06\xee5\xc1=\xc2\xe4Rz\xbd\xbf1u7G/i #E\xd9\x97+B\x835~Z\xcd\xe4\x19\xf1\x82\x1c\xc8>T\x15\x95\x05\xea\xd1\x1f\xc49\x11S\t\xdb+\x83*\xc7\x90F\xdf\xa1\x00H\x0e\xc8\xc0/\xa54$DH\xb9cu\xf5\xf3a\x89z\rZ\xf8\xf8\xacI\xf0\x8e\xec>\xfd\x15\x86R\xb5:.uj\xe0L=\xd2\xcb\xf7Y-\xc2\r\xd59\xacK\xd71\xd5\x9b\xdf\x17\xac$\b\xe6\xe7\x97\xff\x86\xa1\r\xe2\xd0\xd9{h_\xc9\xb1\\\x04PXPE\xc0\xb9\xe8&fX\xc2\',\x17\xc8\xeb)\xf4\x04\x10v\xb0\x8c\x05\xc6\xe6\xa5\x90I\xc0\xc7\x92\x85->\x17\xcaM\x1c\xbf\xcd\xea\n\xf742\xfeM\x01\xbfe9\xec\xf6Z*{.\x19\xb0\x00\x13\xab\xcc!\x17\xb1S\xd3Fx\b\xf5\xca\n\x960\xd5\x05\xe6\xfd\xb5\xfc\xc4\xc5Qz\x8b\xb9\xb3g\xbb\xf8\x05$\x18\xea\x97\xa7\n\x9f$\xfa\xf3\x7f\vy\v=\xbcmx\xe7\x0eH\x84\x88\xc8\x1d\xab\x13\'\xff\x82\x9c\xed\xfbq\x00m\xfa\xc5\x04\xee\xa2y\xacEo\xa0\xc3=[\xb9V\x98\x95\x98\x13\xc21\x90\xf0\x1bc\xecY\x95\xe1\x80')

20:44:34 executing program 4:
sched_rr_get_interval(0x0, &(0x7f0000000fc0))

20:44:34 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KDGETMODE(r0, 0x400448e0, 0x0)

20:44:34 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x5460, 0x0)

20:44:34 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  445.561750] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  445.571663] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  445.581595] ubi0: background thread "ubi_bgt0d" started, PID 31304
[  445.581699] ubi: mtd0 is already attached to ubi0
[  445.593468] ubi0: detaching mtd0
[  445.601438] ubi0: mtd0 is detached
20:44:34 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, 0x2)

20:44:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x1c, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:34 executing program 0:
socket$inet(0x2, 0x0, 0xd1dc)

[  445.711153] ubi0: attaching mtd0
20:44:34 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KDGETMODE(r0, 0x400448cb, 0x0)

20:44:34 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'})

[  445.756269] ubi0: scanning is finished
[  445.771007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
20:44:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_deladdr={0x3c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8}]}, 0x3c}}, 0x0)

[  445.978271] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  445.985903] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  445.992713] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  446.000961] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  446.009860] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
20:44:34 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:34 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
bind$pptp(r0, 0x0, 0x1e00)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)

20:44:34 executing program 5:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="05", 0x1, r0)
add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="f994", 0x2, r0)

20:44:34 executing program 2:
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc)

20:44:34 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2f7b, @fixed, 0x5}, 0xe)

20:44:34 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  446.023562] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  446.031297] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  446.041528] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  446.050848] ubi0: background thread "ubi_bgt0d" started, PID 31357
[  446.055979] ubi: mtd0 is already attached to ubi0
[  446.062162] ubi0: detaching mtd0
[  446.070688] ubi0: mtd0 is detached
20:44:34 executing program 0:
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="a4", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0xfffffffffffffffe, 0x0)

20:44:34 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0)

[  446.157830] ubi0: attaching mtd0
20:44:34 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b72, &(0x7f0000000000))

20:44:34 executing program 0:
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[  446.192727] ubi0: scanning is finished
20:44:35 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000080)={'wg1\x00'})

20:44:35 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)

[  446.389087] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  446.397350] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  446.409718] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  446.435556] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  446.442581] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  446.451852] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  446.461101] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  446.471778] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  446.482627] ubi0: background thread "ubi_bgt0d" started, PID 31405
20:44:35 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:35 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
io_setup(0x6, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040)="008cbf2115f857d43968a9ece0a5b3d5", 0x10}])

20:44:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', 0x0})

20:44:35 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:35 executing program 0:
creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

20:44:35 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  446.486649] ubi: mtd0 is already attached to ubi0
[  446.496323] ubi0: detaching mtd0
[  446.501282] ubi0: mtd0 is detached
20:44:35 executing program 2:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000000c0)='%(#\x00')

20:44:35 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a026302ebda9be0aa2f63bf92d865210298f169dcfbadf3ba92375f4a835f2aa625"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000680), 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x4}, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)

[  446.605061] ubi0: attaching mtd0
20:44:35 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x4b65, &(0x7f0000000000))

20:44:35 executing program 5:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={[], [{@euid_gt}]})

[  446.636427] ubi0: scanning is finished
20:44:35 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x8, 0x0, 0x0)

20:44:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xae00, 0x0)

[  446.863345] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  446.880762] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  446.891266] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  446.902478] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  446.911868] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  446.919056] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  446.927502] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  446.938291] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  446.948908] ubi: mtd0 is already attached to ubi0
[  446.949089] ubi0: background thread "ubi_bgt0d" started, PID 31452
[  446.953865] ubi0: detaching mtd0
20:44:35 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:35 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]})

20:44:35 executing program 5:
rt_sigsuspend(&(0x7f0000000080), 0x8)

20:44:35 executing program 4:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0)

20:44:35 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb}, 0x48)

20:44:35 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  446.967984] ubi0: mtd0 is detached
[  447.058768] ubi0: attaching mtd0
20:44:35 executing program 2:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)

20:44:35 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f0000000140))

20:44:35 executing program 4:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @remote}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e)

[  447.087801] ubi0: scanning is finished
20:44:35 executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='xprt_reserve\x00'}, 0x10)

20:44:35 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}, @dead_binder_done, @decrefs], 0x1, 0x0, &(0x7f0000000100)="f5"})

20:44:36 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x2, 0x0, 0x0)

[  447.246993] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  447.258592] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  447.270784] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  447.288193] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  447.300357] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  447.308574] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  447.323024] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  447.339374] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:36 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:36 executing program 2:
pselect6(0x0, 0x0, 0x0, &(0x7f000000d940), &(0x7f000000d9c0), &(0x7f000000da40)={&(0x7f000000da00)={[0x6]}, 0x8})

[  447.371264] ubi0: background thread "ubi_bgt0d" started, PID 31493
[  447.378806] ubi: mtd0 is already attached to ubi0
[  447.384670] ubi0: detaching mtd0
[  447.395461] ubi0: mtd0 is detached
[  447.477933] ubi0: attaching mtd0
[  447.499311] ubi0: scanning is finished
[  447.558975] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  447.567198] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  447.574039] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  447.580847] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  447.588723] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  447.595204] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  447.602744] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  447.612385] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  447.622031] ubi0: background thread "ubi_bgt0d" started, PID 31518
[  447.623505] ubi0: detaching mtd0
[  447.639700] ubi0: mtd0 is detached
20:44:36 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10)

20:44:36 executing program 0:
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000500)={0x0})

20:44:36 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@end, @end, @ssrr={0x89, 0x17, 0x0, [@local, @multicast1, @remote, @local, @broadcast]}, @lsrr={0x83, 0x7, 0x0, [@multicast2]}, @timestamp_prespec={0x44, 0xfd7a, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}]}, @end]}}}}})

20:44:36 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x0, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x2a, 0xf45d89842872efd5}, 0x24}}, 0x0)

20:44:36 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:36 executing program 4:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$tcp_congestion(r0, &(0x7f0000000040)='highspeed\x00', 0xa)

20:44:36 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x2, 0x0, &(0x7f0000000140))

20:44:36 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000000140))

20:44:36 executing program 5:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffd, 0x0, 0x0)
add_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, r0)

20:44:36 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000040))

20:44:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'gretap0\x00', 0x0})

[  447.934512] ubi0: attaching mtd0
[  447.950585] ubi0: scanning is finished
20:44:36 executing program 5:
pselect6(0x40, &(0x7f000000d0c0), 0x0, &(0x7f000000d140)={0x0, 0x0, 0x0, 0x0, 0x3f}, &(0x7f000000d180)={0x0, 0x3938700}, &(0x7f000000d200)={&(0x7f000000d1c0)={[0x8]}, 0x8})

20:44:36 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="03000000000000000700000000000400060000007805a572747d3a0b00000000f88a000000000000000000000100000021e00000030000007f00000007000000000000000000000000000000803a0023030000000000000004000000000000000000000000000000c369e00a47c7dc3e2b3f0c74056d2db4554681c0fe20d155d84afe111200"/145, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="e3f1d9796174e07d05da3c7462b9d6499140390457e28cfd16e682965e954f6e6806a121be22696878a53e480c3122779d7c3d2683d1246505e87aa664effd2e0d464371c73c4d6c47c6ee4b30e03454b22a2cb2f20e842c571c52656bf960529e23630b8231c1efb55ea37d194af9c02eaf8a463caab9f624b7c59d2078393a29d4fb21738f5949f6a3494afd4563c087b12fe39cd7be414da2e44289235cc1bb1b70c76130a088a2067d98cc330c3a3a7766f0ef9d8d8535f09ea4e934521cc8c069035a6e7e45915ddee12dbf01d48253150b6a8231119d4f311f9fe1c65ef86130b38d9b62567de4c7be39"])
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

20:44:36 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8980, 0x0)

[  448.158808] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  448.166556] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  448.173224] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  448.180179] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  448.187318] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  448.193694] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:37 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:37 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f00000000c0)={'sit0\x00', 0x0})

20:44:37 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:37 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, 0x0)

20:44:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, r2})

20:44:37 executing program 5:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e)

[  448.201543] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  448.211788] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  448.221400] ubi0: background thread "ubi_bgt0d" started, PID 31572
[  448.228515] ubi: mtd0 is already attached to ubi0
[  448.233669] ubi0: detaching mtd0
[  448.244253] ubi0: mtd0 is detached
20:44:37 executing program 4:
pselect6(0x40, &(0x7f000000d0c0), &(0x7f000000d100), 0x0, &(0x7f000000d180)={0x0, 0x3938700}, 0x0)

20:44:37 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140), 0x4)

20:44:37 executing program 5:
r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x7, r0, 0xfffffffffffffffd, 0x0, 0x0)

20:44:37 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x8850)

[  448.377389] ubi0: attaching mtd0
20:44:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700002000000e93000000024111008400640000e0299078ffffffffff"]})

20:44:37 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x80104592, 0x0)

[  448.407095] ubi0: scanning is finished
[  448.570312] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  448.577508] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  448.584223] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  448.593112] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  448.601434] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  448.610041] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:37 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:37 executing program 0:
pselect6(0x0, 0x0, &(0x7f000000d900), &(0x7f000000d940), &(0x7f000000d9c0), &(0x7f000000da40)={&(0x7f000000da00)={[0x6]}, 0x8})

20:44:37 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000))

20:44:37 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x101302, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'net_cls'}]}, 0x9)

20:44:37 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000002580), 0x1a00c0, 0x0)

[  448.618822] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  448.629471] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  448.629762] ubi0: background thread "ubi_bgt0d" started, PID 31621
[  448.638878] ubi: mtd0 is already attached to ubi0
[  448.651867] ubi0: detaching mtd0
[  448.657852] ubi0: mtd0 is detached
20:44:37 executing program 0:
add_key$keyring(&(0x7f0000000580), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$link(0xe, 0x0, 0x0)

20:44:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0)

20:44:37 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, r2})

[  448.717792] ubi0: attaching mtd0
[  448.731800] ubi0: scanning is finished
20:44:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'erspan0\x00', 0x0})

20:44:37 executing program 0:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00')

20:44:37 executing program 5:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x198, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)

[  448.969113] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  448.976207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  448.982767] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  448.991314] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  448.998812] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  449.005211] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:37 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x0, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:37 executing program 2:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, 0x0)

20:44:37 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:37 executing program 4:
pselect6(0x40, &(0x7f0000000200)={0x4, 0x2}, 0x0, &(0x7f0000000280)={0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x1]}, 0x8})

20:44:37 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0)

20:44:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x64, 0xf45d89842872efd5}, 0x24}}, 0x0)

[  449.012798] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  449.022457] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  449.032067] ubi0: background thread "ubi_bgt0d" started, PID 31666
[  449.033775] ubi: mtd0 is already attached to ubi0
[  449.047074] ubi0: detaching mtd0
[  449.054442] ubi0: mtd0 is detached
20:44:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14}, 0x14}}, 0x0)

20:44:37 executing program 4:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='./file0\x00', 0x0, 0x809800, 0x0)

20:44:37 executing program 0:
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB="03000000000000000700000000000400060000007805a572747d3a0b00000000f88a000000000000000000000100000021e00000030000007f00000007000000000000000000000000000000803a0023030000000000000004000000000000000000000000000000c369e00a47c7dc3e2b3f0c74056d2db4554681c0fe20d155d84afe111200"/145, @ANYRES64=r0, @ANYRESDEC])
r2 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
bind$pptp(r0, 0x0, 0x1e00)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)

[  449.131597] ubi0: attaching mtd0
20:44:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:44:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D'], 0x444}}, 0x0)

[  449.219508] ubi0: scanning is finished
20:44:38 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018240000", @ANYRES32=0x0, @ANYBLOB="1a026302ebda9be0aa2f63bf92d865210298f169dcfbadf3ba92375f4a835f2aa625d490127b26ff87ffc079c026ac522e368b64aa6f0a54c0e50b15ccf0ce2e3a31041a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xa4, &(0x7f0000000300)=""/164, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000680), 0x6)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x4, 0x1}, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)

[  449.383721] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  449.396215] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  449.402995] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  449.412071] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  449.420964] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  449.429919] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  449.438436] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  449.449496] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  449.460493] ubi0: background thread "ubi_bgt0d" started, PID 31715
[  449.468432] ubi: mtd0 is already attached to ubi0
[  449.473455] ubi0: detaching mtd0
20:44:38 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:38 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f00000000c0)=@id, 0x10)

[  449.489127] ubi0: mtd0 is detached
20:44:38 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:38 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), 0xf)

20:44:38 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00')

20:44:38 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00')
read$eventfd(r0, 0x0, 0x0)

20:44:38 executing program 2:
mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000d40))

[  449.558909] ubi0: attaching mtd0
20:44:38 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f000000b200)='./cgroup.net/syz0\x00', 0x200002, 0x0)

20:44:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000002440)='auxv\x00')
connect$vsock_stream(r0, 0x0, 0x0)

20:44:38 executing program 5:
bpf$PROG_LOAD_XDP(0x4, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:38 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x0, 0x0, 0x1f}, 0x48)

[  449.670406] ubi0: scanning is finished
20:44:38 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000200)='./file0\x00', 0x0, 0x809800, 0x0)

[  449.851579] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  449.858963] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  449.867716] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  449.877223] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  449.883910] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  449.892106] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:38 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:38 executing program 4:
rt_sigtimedwait(&(0x7f0000000100), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x8)

20:44:38 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

20:44:38 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none, 0x48ca}, 0xe)

20:44:38 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x21, 0x0, &(0x7f0000000140))

20:44:38 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  449.900467] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  449.913088] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  449.923365] ubi0: background thread "ubi_bgt0d" started, PID 31763
[  449.925934] ubi: mtd0 is already attached to ubi0
[  449.936501] ubi0: detaching mtd0
[  449.943300] ubi0: mtd0 is detached
20:44:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')
read$FUSE(r0, 0x0, 0x0)

20:44:38 executing program 0:
r0 = socket(0xa, 0x3, 0x20)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

20:44:38 executing program 2:
io_setup(0x400, &(0x7f0000002780)=<r0=>0x0)
io_destroy(r0)

[  450.044666] ubi0: attaching mtd0
20:44:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)

20:44:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x5000}, 0x0)

[  450.101610] ubi0: scanning is finished
20:44:38 executing program 0:
io_setup(0x1, &(0x7f00000000c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
io_submit(r0, 0x1, &(0x7f0000000d40)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

[  450.279641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  450.287065] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  450.293680] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  450.300590] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  450.308674] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  450.316295] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:39 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:39 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

20:44:39 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})

20:44:39 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0xa, 0x0, &(0x7f0000000140))

20:44:39 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000000140))

20:44:39 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  450.323974] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  450.335425] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  450.346080] ubi0: background thread "ubi_bgt0d" started, PID 31808
[  450.346230] ubi: mtd0 is already attached to ubi0
[  450.358697] ubi0: detaching mtd0
[  450.363635] ubi0: mtd0 is detached
20:44:39 executing program 0:
creat(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='erofs\x00', 0x0, 0x0)

20:44:39 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x3, 0x0, 0x0)

20:44:39 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)

20:44:39 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x24, 0x32, 0xf45d89842872efd5}, 0x24}}, 0x0)

[  450.467842] ubi0: attaching mtd0
[  450.517264] ubi0: scanning is finished
20:44:39 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x1c, 0x0, &(0x7f0000000140))

20:44:39 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

[  450.606295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  450.641726] tc_dump_action: action bad kind
[  450.700376] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  450.713607] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  450.722617] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  450.738506] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  450.745580] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  450.751811] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  450.762314] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  450.772247] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  450.782043] ubi0: background thread "ubi_bgt0d" started, PID 31854
[  450.782434] ubi: mtd0 is already attached to ubi0
[  450.794834] ubi0: detaching mtd0
20:44:39 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:39 executing program 5:
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)

20:44:39 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000001740)={0x124, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

20:44:39 executing program 0:
unshare(0x40000400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000002c0)={'mangle\x00'}, &(0x7f0000000280)=0x54)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000140)=0x54)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000080)=0x54)

20:44:39 executing program 4:
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
syz_clone(0x0, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)

20:44:39 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  450.802569] ubi0: mtd0 is detached
20:44:39 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)={0x11c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

[  450.895291] IPVS: ftp: loaded support on port[0] = 21
[  450.905069] ubi0: attaching mtd0
[  450.956191] ubi0: scanning is finished
[  450.957023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  451.273672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  451.510246] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  451.524101] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  451.540200] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  451.574032] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  451.591275] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  451.606284] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:40 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r5, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex=r0, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000001740)={0x12c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r8, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

[  451.619088] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  451.629276] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  451.639161] ubi0: background thread "ubi_bgt0d" started, PID 31915
[  451.646336] ubi: mtd0 is already attached to ubi0
[  451.652079] ubi0: detaching mtd0
[  451.662291] ubi0: mtd0 is detached
20:44:40 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:40 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{}, {0x3}]})

20:44:40 executing program 4:
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
syz_clone(0x0, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)

20:44:40 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:40 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)={0x11c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

20:44:40 executing program 2:
socketpair(0x11, 0x2, 0x0, &(0x7f0000000c40))

[  452.042379] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  452.086434] ubi0: attaching mtd0
[  452.155935] ubi0: scanning is finished
20:44:40 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f000000a240)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0)

20:44:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x11, 0x0, 0x0)

[  452.440544] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  452.467341] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  452.488576] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  452.510432] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  452.529854] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
20:44:41 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0)

[  452.548609] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  452.581657] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x0)

[  452.643373] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
setrlimit(0x5, &(0x7f0000000040))
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
getrlimit(0xb, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x50, &(0x7f0000000380)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400001}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
syncfs(r4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc)
open(&(0x7f0000000240)='./file0\x00', 0x20040, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
faccessat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x80)
write$cgroup_pid(r3, &(0x7f0000000440)=r0, 0x12)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000832b00000000000006000000186a000003000000000000001f000000852000000200000018160000", @ANYRES32, @ANYBLOB="eb090000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1f, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r3]}, 0x80)
socket$unix(0x1, 0x1, 0x0)
getpid()
syz_clone(0x760e4500, 0x0, 0x0, 0x0, 0x0, 0x0)

20:44:41 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  452.713298] ubi0: background thread "ubi_bgt0d" started, PID 31960
[  452.721890] ubi: mtd0 is already attached to ubi0
[  452.727825] ubi0: detaching mtd0
[  452.738300] ubi0: mtd0 is detached
20:44:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x2d, 0x0, 0x0)

20:44:41 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  452.882388] ubi0: attaching mtd0
[  452.896539] ubi0: scanning is finished
[  453.085968] IPVS: ftp: loaded support on port[0] = 21
[  453.396103] audit: type=1804 audit(1672865081.817:27): pid=31978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3494749250/syzkaller.B5JDlw/559/file0" dev="sda1" ino=14958 res=1
20:44:42 executing program 4:
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
syz_clone(0x0, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)

20:44:42 executing program 2:
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000540)={0x1, &(0x7f0000000380)=[{0x1, 0x9}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0xfd5dd0643aab42ac, &(0x7f0000000280))
getrlimit(0x8, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0xffd)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="47000000000000100000000000000000000000cec5cb511d65782e1868fe3cecd4c61271b37d888ed22f55f8fd4e89045e55f81cc23f15a8817f122e3f3ea8d398c942b42dfd919f9c2a70f67dc942190159c9df1ed60a22414ca2dfbdff2d7f65c257b48ca68d"]})

20:44:42 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)={0x11c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

[  453.778565] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
20:44:42 executing program 0:
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/1481], &(0x7f0000000100)='GPL\x00'}, 0x48)

[  453.825804] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  453.886164] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  454.287010] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  454.294355] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  454.328206] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:43 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
sched_setparam(0xffffffffffffffff, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
setxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000440), 0x0)
pipe(&(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', 0x0})
getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, &(0x7f0000001880))
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0x2800, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x400, @vifc_lcl_ifindex, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)={0x11c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r7, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700)

[  454.453606] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  454.477514] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:43 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f00000007c0)=@raw=[@cb_func], &(0x7f0000000800)='GPL\x00', 0xffff0001, 0xe1, &(0x7f0000000840)=""/225, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  454.536805] ubi0: background thread "ubi_bgt0d" started, PID 32012
[  454.536821] ubi0: detaching mtd0
20:44:43 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='(', 0x1}], 0x1}}], 0x1, 0x0)

[  454.592157] ubi0: mtd0 is detached
[  454.603869] ubi0: attaching mtd0
[  454.610279] ubi0: scanning is finished
20:44:43 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:43 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x2, 0x0)

20:44:43 executing program 4:
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)
syz_clone(0x0, &(0x7f0000003600), 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000)

20:44:43 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x0, 0x200, 0x1, 0x20, 0x7, 0x0, 0xffffff81, 0x5dc}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/1481], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
eventfd(0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)}, {0x0}, {&(0x7f0000001d00)="23542f06933623eff2a4bbdde051fd39dd10bfde8a89c44b8e1d38ea22c0bbc0ba3dbbecc5b869a268b6f7116dbcbfb7459cef8d1ac0a9560f80002d9fd4571387115a40e05647b4c1d567aa5b4724b922225496b6a39c9be00c16b7a7af31bd4b39d4980312a582c39847f213d2dce52118dea0368f0cc433766a40231fdfce9364753e5b107d3481608ef803765db6a92c7c6619cfb9b7fcc7b6308062921a9857fee259", 0xa5}, {&(0x7f0000000c40)="f1776142bd5a3cee848c6360265a95423607f6ac164a04a0e15b46aa6e7a5845ea5e441684e23527f482d09121e93e28db1fb528e339f612c55d56b30058d4dcf10f8256f7a7736b", 0x48}, {&(0x7f0000001dc0)="6cb8770b0040da08919b75f5458092ce40663c7449bfd994e937b34f8c5af251a95b56569d2c64d60465c9607494e030fd9eb7c04505850295b7e62fe44ac962bfdae6d1d385ff68e45425a2adfa93c5714dc547abddf0de4de121532bbedac237b1260274b38d0e124db3bcfb405492538ae2689190aff22dab8ebd3582d8f2ec06d73cd8d71664fe", 0x89}, {&(0x7f0000000980)="19e18e0b94d5bce2", 0x8}, {0x0}], 0x7}}], 0x1, 0x11)
creat(0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x401870cb, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
pipe(0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47)

[  454.866548] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  454.912518] ubi0: attaching mtd0
[  454.917129] ubi0: scanning is finished
20:44:43 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x14, 0x0, 0x0)

20:44:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x3, 0x0, 0x0)

20:44:43 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x88}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:44 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x200)

[  455.245920] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  455.262271] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  455.307664] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  455.324768] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  455.331867] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  455.338458] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  455.353137] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  455.374206] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  455.398444] ubi0: background thread "ubi_bgt0d" started, PID 32091
[  455.418627] ubi0: detaching mtd0
[  455.432510] ubi0: mtd0 is detached
[  455.455215] ubi0: attaching mtd0
[  455.495159] ubi0: scanning is finished
20:44:44 executing program 0:
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0\x00')

20:44:44 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:44 executing program 4:
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)=[0xfffffffffffffffc], 0x0)

20:44:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x3a, 0x0, 0x0)

20:44:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x11, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x8, &(0x7f0000000000), 0x20000000000001bf)

[  455.842418] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  455.910578] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  455.934045] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  455.960096] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  455.978881] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  455.991913] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  456.008320] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  456.026537] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  456.052021] ubi0: background thread "ubi_bgt0d" started, PID 32114
[  456.052037] ubi0: detaching mtd0
[  456.069215] ubi0: mtd0 is detached
[  456.076916] ubi0: attaching mtd0
[  456.126364] ubi0: scanning is finished
[  456.287379] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  456.295544] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  456.302108] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  456.309646] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  456.317129] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  456.323262] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  456.332433] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  456.342470] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  456.353000] ubi0: background thread "ubi_bgt0d" started, PID 32129
[  456.363283] ubi0: detaching mtd0
[  456.373787] ubi0: mtd0 is detached
20:44:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x2e, 0x0, 0x0)

20:44:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

20:44:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000003340)=""/241, 0xf1}], 0x1, &(0x7f00000044c0)}}], 0x1, 0x0, &(0x7f000000a4c0))
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='(', 0x1}], 0x1}}], 0x1, 0x0)

20:44:45 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff45, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='(', 0x1}], 0x1}}], 0x1, 0x0)

20:44:45 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:45 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  456.482430] ubi0: attaching mtd0
20:44:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x18, 0x0, 0x0)

[  456.521492] ubi0: scanning is finished
20:44:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010026bd700000000000fc010000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="880100001b"], 0x188}}, 0x0)

20:44:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0)

20:44:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0xb, 0x0, 0x0)

20:44:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x12, 0x0, 0x0)

[  456.668791] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'.
20:44:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x10, &(0x7f0000000000)=[@sack_perm, @timestamp, @timestamp, @sack_perm], 0x4)

20:44:45 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='(', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}}], 0x2, 0x4000040)

[  456.784975] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  456.808722] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
20:44:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x16, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

[  456.831580] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  456.853283] ubi0: VID header offset: 64 (aligned 64), data offset: 128
20:44:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, 0x0, 0x0)

[  456.877005] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  456.911630] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  456.943090] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  456.991536] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  457.030997] ubi0: background thread "ubi_bgt0d" started, PID 32173
[  457.038562] ubi: mtd0 is already attached to ubi0
[  457.043721] ubi0: detaching mtd0
[  457.050401] ubi0: mtd0 is detached
20:44:47 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{&(0x7f00000032c0)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x20}}], 0x2, 0x0)

20:44:47 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

20:44:47 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x6, 0x0, 0x59)

20:44:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x4}}}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x27}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)

20:44:47 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:47 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2a, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x17, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:47 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMSET(r0, 0x4b36, 0x0)

[  458.825792] ubi0: attaching mtd0
20:44:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x98, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'wg0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220)

[  458.883749] ubi0: scanning is finished
20:44:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000600)={0x0, 0x0, 0xffffff7f})

20:44:47 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

[  459.030926] x_tables: duplicate underflow at hook 3
20:44:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, 0x0, 0x0)

20:44:47 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002ec0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x30}}], 0x2, 0x0)

20:44:47 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f000000a240)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0)

[  459.174156] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  459.197775] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  459.230339] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  459.246488] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  459.257422] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  459.263766] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:48 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  459.273670] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  459.285363] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  459.296514] ubi0: background thread "ubi_bgt0d" started, PID 32240
[  459.303444] ubi: mtd0 is already attached to ubi0
[  459.311816] ubi0: detaching mtd0
[  459.319091] ubi0: mtd0 is detached
20:44:48 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:48 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff45, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="287570a71bced5f8a1", 0x9}], 0x1}}], 0x1, 0x0)

20:44:48 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x12, &(0x7f0000000000)=[@sack_perm, @timestamp, @timestamp, @sack_perm], 0x4)

20:44:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x141, 0x0)

20:44:48 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}})

20:44:48 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

[  459.449001] ubi0: attaching mtd0
20:44:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWMDB={0x58, 0x54, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@dev}}}]}, 0x58}}, 0x0)

[  459.508725] ubi0: scanning is finished
[  459.662310] PF_BRIDGE: br_mdb_parse() with invalid ifindex
[  459.672363] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  459.679896] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  459.692484] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  459.699265] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  459.712612] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  459.731572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  459.770092] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  459.780701] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  459.796095] ubi0: background thread "ubi_bgt0d" started, PID 32283
[  459.802922] ubi: mtd0 is already attached to ubi0
[  459.809266] ubi0: detaching mtd0
[  459.822190] ubi0: mtd0 is detached
20:44:48 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x6, &(0x7f0000000000)=[@sack_perm={0x20000004}, @timestamp, @timestamp, @sack_perm], 0x4)

20:44:48 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

20:44:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x19, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:48 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:48 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  459.989886] ubi0: attaching mtd0
[  460.017640] ubi0: scanning is finished
[  460.175324] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  460.183540] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  460.194716] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  460.201707] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  460.210974] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  460.218312] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  460.234020] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  460.244483] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  460.262099] ubi0: background thread "ubi_bgt0d" started, PID 32317
[  460.271651] ubi: mtd0 is already attached to ubi0
[  460.281956] ubi0: detaching mtd0
[  460.300504] ubi0: mtd0 is detached
20:44:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x4b, 0x0, 0x0)

20:44:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x33, 0x0, 0x0)

20:44:49 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:49 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:49 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x4d, 0x0, 0x0)

20:44:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x20000000)

[  461.036534] ubi0: attaching mtd0
20:44:49 executing program 2:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
poll(&(0x7f0000000400)=[{r5}], 0x1, 0x100)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000100)={r6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000000)={r7})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f00)=[{&(0x7f00000003c0)="40d6fcbd40093467097727c0fb87238dcee324d7ef16d67272d918339a7d883b239447b577f01061fc6b0bf39e9707d9b59603f69a964ea9aff89205fbde131296da3d6d5917f964", 0x48}, {&(0x7f00000005c0)="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", 0xfd}, {&(0x7f0000000880)="2eb45b03a1d7ee0398e1e3a1a8711c98d7512395734806397edefa4158145a29008552d003e64bc47a1659853be9db079e4de3e37ee849dc43dba2d4fdb3f56c5f1285462a1843adc4efbe170a278e58961362c189cf845aaf39f781ece47531b01623e0efd541c837a99a7db3166d95a2d4237cb01a9e021a791442ebc9e8d0ffd05b170849bf95feee4e43fa0eda5a0ecc02e786d7e0950683b730cf2a173cd10803ffb38071a7252a2ed523d3aa1894a4711d5282f8bb3b3764bc805ebb", 0xbf}, {&(0x7f0000000780)="79e8e604ebf16428472a9066a294d8bfe8dc7c40c102c12da0e8c84ec6e1782d914c2ac7c789b22611bb13ff13f684d9ee72e7b075ded224fd84fb455f4c917c8c5b251b969a2997c2cbdaeba2292971a1a44377d3ab44a2154aaa1f99dd935e74b064", 0x63}, {&(0x7f0000000940)="2895b56db4322d8ec47d0e8df3982e013c6a26bb82a7f4cea53655bd9814ec3f76d92a4c83f646fb673d2598dd0456b007dce8223f52254db7a561479ea59eddca38454b9fd7f2facee50b212869eba66dcda608570b953c95bf29d313f4acc2a3b38bd8d2e9942915a77830ff12d718ec447e304492075047c68a393c62dd1e2f3893f9b847ebb220db314eee1984e159207fa01063bb61f183b509fd398e0a9a4d6bafc7dfe658fb43b95c7cc13ffa3e89389b19160eee1bed149a3367edac47f2f01e1e2048c25bdccedb9557f1d0c4e033881b81c133acb35ded7c", 0xdd}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="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", 0xf80}, {&(0x7f0000000a40)="eab8782b1590569aaf65e8d38bd8b5f03d3fb5c8313096a6416d9d1ce6404c4faff7273f58791c60319c6f1aad4486ab5bb90d95f92ac5e21ea2910f1ee332cad4cd634ae777a563158dec6cc06c5e80eb2e6dcb2b593b2780c2a30a62a0b70d11e0e3153d14ee106349dbdc89c1ebc9775d63acb1c1b6a4c52eff57d3e31278e883b2a830903be10ed51de27c83b3416f0a5271cf4eab50c1344231b61d9f9a6095af68ad3482798ebc098870d963cba2f4dad4d5a925e50900d0acfa4a5d03e75cda50ac16e13cca1b225fb009505b95d811d8bd4a0aa15cb0cc121775f68d", 0xe0}, {0x0}], 0x9, &(0x7f0000001000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000003740)}], 0x1, 0x0, 0x0, 0x20000001}}], 0x2, 0x4004080)
capset(&(0x7f0000000140), &(0x7f0000000280)={0x3, 0x41, 0x3f, 0x1, 0x40})
ftruncate(r3, 0x800)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x400017e)
lseek(r3, 0x200, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20)
sendfile(r3, r8, 0x0, 0xca00)

20:44:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x3c, 0x0, 0x0)

[  461.095307] ubi0: scanning is finished
20:44:49 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='.\x00'}, 0x10)

20:44:49 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f000000a240)=[{{&(0x7f00000032c0)=@abs, 0x6e, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x38}}], 0x2, 0x0)

20:44:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)

20:44:50 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, &(0x7f0000000340)=@abs, &(0x7f0000000140)=0xfffffe57)

20:44:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x6, 0x0, 0x0)

[  461.371597] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  461.402301] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  461.442942] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  461.462327] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  461.464284] audit: type=1804 audit(1672865090.228:28): pid=32375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir858591389/syzkaller.lW9qsM/397/bus" dev="sda1" ino=15013 res=1
[  461.485485] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  461.501153] audit: type=1800 audit(1672865090.268:29): pid=32375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15013 res=0
[  461.529201] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:50 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x4a, 0x0, 0x0)

20:44:50 executing program 4:
creat(0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100))
ftruncate(r1, 0x7fb)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x1000fc4)
fallocate(r0, 0x100000003, 0x0, 0x28122001)

20:44:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x24, 0x0, 0x0)

20:44:50 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  461.537726] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  461.548116] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  461.559009] ubi0: background thread "ubi_bgt0d" started, PID 32369
[  461.559086] ubi: mtd0 is already attached to ubi0
[  461.572163] ubi0: detaching mtd0
[  461.577565] ubi0: mtd0 is detached
[  461.673690] ubi0: attaching mtd0
[  461.687006] audit: type=1804 audit(1672865090.458:30): pid=32387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3814322396/syzkaller.CNy0W9/1168/bus" dev="sda1" ino=15002 res=1
[  461.697209] ubi0: scanning is finished
[  461.958331] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  461.970077] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  461.977349] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  461.991495] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  462.005661] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  462.012081] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  462.021712] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  462.031767] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  462.042864] ubi0: background thread "ubi_bgt0d" started, PID 32405
[  462.050912] ubi: mtd0 is already attached to ubi0
[  462.056458] ubi0: detaching mtd0
[  462.066987] ubi0: mtd0 is detached
20:44:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2c57b513ff74605b202cd4921c44473ef9587a972bd0d8a3e83829b323fe4b18"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x48}}, 0x0)

20:44:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={0x0, 0x78}}, 0x0)

20:44:51 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x10)

20:44:51 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:51 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:51 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x2a, 0x0, 0x0)

20:44:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x6, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

[  462.479640] ubi0: attaching mtd0
20:44:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x29, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

[  462.521945] ubi0: scanning is finished
20:44:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:51 executing program 4:
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/1481], &(0x7f0000000100)='GPL\x00'}, 0x48)
eventfd(0x0)
creat(0x0, 0x0)

20:44:51 executing program 2:
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff)

20:44:51 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x4, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8}]}}}]}, 0x44}}, 0x0)

20:44:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_dellink={0x20}, 0x20}}, 0x0)

20:44:51 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

20:44:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x23, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

[  462.745508] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  462.908871] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  462.932642] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  462.940198] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  462.947654] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  462.955174] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  462.961651] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  462.974224] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  462.983930] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  462.998158] ubi0: background thread "ubi_bgt0d" started, PID 32465
20:44:51 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:51 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:51 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)

20:44:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0xfd5dd0643aab42ac, &(0x7f0000000280))
getrlimit(0x8, &(0x7f0000000300))
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000586000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(r0, 0xe34aadf2bd446df9, &(0x7f00000000c0)={0x8000000000000001, 0x8}, &(0x7f0000000340))
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="47000000000000100000000000000000000000cec5cb511d65782e1868fe3cecd4c61271b37d888ed22f55f8fd4e89045e55f81cc23f15a8817f122e3f3ea8d398c942b42dfd919f9c2a70f67dc942190159c9df1ed60a22414ca2dfbdff2d7f65c257b48ca68d"]})

20:44:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan1\x00'}}]}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x27}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)

[  462.998459] ubi: mtd0 is already attached to ubi0
[  463.009651] ubi0: detaching mtd0
[  463.019520] ubi0: mtd0 is detached
20:44:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, 0x0, 0x0)

[  463.106497] ubi0: attaching mtd0
20:44:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x8, &(0x7f0000000000)=[@sack_perm, @timestamp, @timestamp, @sack_perm], 0x4)

[  463.134954] ubi0: scanning is finished
20:44:51 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x3b, 0x0, 0x0)

20:44:52 executing program 0:
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dots}, {@fat=@dmask={'dmask', 0x3d, 0x10000}}, {@dots}, {@dots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '855'}}]}, 0x1, 0x2d1, &(0x7f00000003c0)="$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")
r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x10, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x48}}, 0x0)

20:44:52 executing program 0:
sched_setattr(0x0, &(0x7f0000000100)={0x38}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

[  463.293612] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  463.303013] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.308081] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  463.310628] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.323090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.360855] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  463.373305] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  463.381600] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  463.389257] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  463.398916] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  463.409910] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  463.427472] ubi: mtd0 is already attached to ubi0
[  463.427492] ubi0: background thread "ubi_bgt0d" started, PID 32504
[  463.438984] ubi0: detaching mtd0
[  463.448566] ubi0: mtd0 is detached
20:44:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x8, 0x0, 0x0)

20:44:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:52 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:52 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000480)='./file0\x00', 0x84000100)
bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e)

20:44:52 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  463.684900] ubi0: attaching mtd0
[  463.722063] ubi0: scanning is finished
[  463.803229] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  463.815286] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  463.821787] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  463.833897] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  463.843656] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  463.852589] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  463.860911] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  463.871163] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  463.881616] ubi0: background thread "ubi_bgt0d" started, PID 32537
[  463.888202] ubi: mtd0 is already attached to ubi0
[  463.895950] ubi0: detaching mtd0
[  463.903206] ubi0: mtd0 is detached
20:44:52 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x38, 0x0, 0x0)

20:44:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

20:44:52 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff45, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="287570a71bced5f8a12bea86", 0xc}], 0x1}}], 0x1, 0x0)

20:44:52 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x22, &(0x7f0000000000)=[@sack_perm, @timestamp, @timestamp, @sack_perm], 0x4)

20:44:52 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:52 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:52 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff45, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="287570a71bced5f8a12b", 0xa}], 0x1}}], 0x1, 0x0)

[  464.026016] ubi0: attaching mtd0
20:44:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x22, 0x0, 0x0)

20:44:52 executing program 4:
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff)

[  464.052093] ubi0: scanning is finished
20:44:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x16, 0x0, 0x0)

20:44:52 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16}}], 0x1, 0x0)

20:44:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan1\x00'}}]}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@ttl={{0x27}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0)

20:44:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0)

20:44:53 executing program 2:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

20:44:53 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xa, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'team0\x00', 'veth0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @local, 0x0, 0x0, '\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'erspan0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)

[  464.284757] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  464.297441] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  464.307661] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  464.314925] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  464.351506] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  464.361164] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  464.370766] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  464.380710] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:44:53 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
getpgid(r0)
sched_setscheduler(r0, 0x5, &(0x7f0000000300)=0x1)
sched_setaffinity(r0, 0x8, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x200)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r5, 0x800)
lseek(r5, 0x0, 0x2)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
sendfile(r5, r6, 0x0, 0x1dd00)

20:44:53 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  464.407583] ubi0: background thread "ubi_bgt0d" started, PID 32587
[  464.408844] ubi: mtd0 is already attached to ubi0
[  464.431066] ubi0: detaching mtd0
[  464.438609] ubi0: mtd0 is detached
[  464.535707] ubi0: attaching mtd0
[  464.563376] ubi0: scanning is finished
[  464.639310] audit: type=1804 audit(1672865093.408:31): pid=32616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3494749250/syzkaller.B5JDlw/595/bus" dev="sda1" ino=15023 res=1
[  464.665033] 
[  464.666871] **********************************************************
[  464.673626] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[  464.680704] **                                                      **
[  464.687491] audit: type=1800 audit(1672865093.408:32): pid=32616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15023 res=0
[  464.692586] ** trace_printk() being used. Allocating extra memory.  **
[  464.719187] **                                                      **
[  464.725946] ** This means that this is a DEBUG kernel and it is     **
[  464.732796] ** unsafe for production use.                           **
[  464.739577] **                                                      **
[  464.747260] ** If you see this message and you are not debugging    **
[  464.754425] ** the kernel, report this immediately to your vendor!  **
[  464.761097] **                                                      **
[  464.767988] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[  464.774804] **********************************************************
[  464.776611] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  464.804140] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  464.810790] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  464.817401] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  464.824370] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  464.830551] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  464.838076] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  464.854517] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  464.943201] ubi0: background thread "ubi_bgt0d" started, PID 32619
[  464.964903] ubi: mtd0 is already attached to ubi0
[  464.980049] ubi0: detaching mtd0
[  464.991808] ubi0: mtd0 is detached
20:44:54 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x11, 0x0, 0x0)

20:44:54 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x4e, 0x0, 0x0)

20:44:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x12022, 0x0, 0x0)

20:44:54 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:54 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc095)

20:44:54 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x0, 0x0, 0xfffffffd}, 0x48)

20:44:54 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x29, 0x17, 0x0, 0x0)

20:44:54 executing program 5:
syz_clone(0x200000, &(0x7f0000000180)="ccfa95f893793603da84c428a1eeb5a20d36766781bb443f95bcb981a38b4918e2e366f9d167d5ac418faf2ea9ff4f37d5fe10d2f2b3263e93471ac328c59e4f9be7d5d666b8c3580077a4759a6a17e7c458a2f235b4", 0x56, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)="e82f642e3b6b7a8a9c1f3c21ee8707178485c53c3a2678b400c673b6743944f06ce2270a084a29a59eb1396f19d365212c6b03d74053f0e84453b9cbb529733108b50ea4475f95cdc5a68b77eeacc897b0da83354a9e36b97fbc67b189c40ef292c45d94defb5c59de7e67bd5c1aec055dc18877b1e1d6f12620456aa232b4426d94f3cadec29ce22c5b5fb7c6970941c84a3744c49f22ce6a6c5488b70aff95af94e34e82b7b93fa40e4d0a736ad67b662a56c76aa02cb62dab7a71ffde7b0ed1068a7d469cfc1a4e1820c54d28943048034f9b1c0b25c0c30cf8c7aeda81b514a6fb2a9ac6fbff25a600"/245)
pipe2$watch_queue(&(0x7f0000000380), 0x80)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)

20:44:54 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001c9, 0x0)

[  465.802372] ubi0: attaching mtd0
20:44:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, 0x0, 0x0)

[  465.848834] ubi0: scanning is finished
20:44:54 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)

20:44:54 executing program 5:
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))

20:44:54 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="01000a6d1c21cbda632fa425e095b0922d3164752d8aedbfc9afdac447f7851270752a8a244a3e509e010644271d49d1191338181035900b118ad009a5f3ff8072d92e7c2bfb8d47a5654bfd84509869d924e4128a1adf66fe7fa547a221f6d6cc4dccb712b2e52aae1b32d1609b6251258f7c345023278b09c3fd187100"/138], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
poll(&(0x7f0000000180)=[{}, {r1, 0x1004}], 0x2, 0x200)

20:44:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendfile(r2, r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

[  466.064718] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  466.077225] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  466.102662] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  466.109985] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  466.118566] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  466.126659] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  466.144897] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:44:55 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:55 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:55 executing program 5:
syz_clone(0x20005000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)

[  466.158527] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  466.169640] ubi0: background thread "ubi_bgt0d" started, PID 32674
[  466.178800] ubi: mtd0 is already attached to ubi0
[  466.184637] ubi0: detaching mtd0
[  466.196011] ubi0: mtd0 is detached
[  466.326905] ubi0: attaching mtd0
[  466.371683] ubi0: scanning is finished
20:44:55 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x294}, 0x48)

20:44:55 executing program 5:
syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0)

[  466.653801] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  466.670677] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  466.681194] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  466.691758] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  466.701286] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  466.722237] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:55 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0)

[  466.745422] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  466.763821] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  466.791337] ubi0: background thread "ubi_bgt0d" started, PID 32711
20:44:55 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  466.802821] ubi: mtd0 is already attached to ubi0
[  466.810678] ubi0: detaching mtd0
[  466.821546] ubi0: mtd0 is detached
20:44:55 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x13c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x120, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2c57b513ff74605b202cd4921c44473ef9587a972bd0d8a3e83829b323fe4b18"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x70, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x13c}}, 0x0)

[  466.993211] ubi0: attaching mtd0
[  467.011765] ubi0: scanning is finished
[  467.196699] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  467.203684] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  467.218260] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  467.225586] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  467.232371] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  467.244625] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  467.252071] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  467.273697] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  467.288539] ubi0: background thread "ubi_bgt0d" started, PID 32748
[  467.295516] ubi: mtd0 is already attached to ubi0
[  467.300874] ubi0: detaching mtd0
[  467.307557] ubi0: mtd0 is detached
20:44:56 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))

20:44:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x82, &(0x7f0000000000), &(0x7f0000000100)=0x8)

20:44:56 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000240)=""/147, 0x26, 0x93, 0x1}, 0x20)

20:44:56 executing program 4:
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000017c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000007c0)={{r1}, r3, 0x0, @unused=[0x355498e0, 0x147, 0x8001, 0x9], @devid})
prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/146)
lstat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'wg2\x00', 'wlan0\x00', {}, {}, 0x2e, 0x3, 0x1}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x100, 0x2, 'fsm\x00', "42146de80d97430863e2aca05cce00828890b18e1984c9fd5bb47288fc20cbc1dd8d30d942dbb198a6c36223e9ef6d17947bb8e6a5d98e3af913215e3ab9fabe0c1bd50758630d45e6b31d4e18e1909d7164c4ce92e3899be229c8f7071023da9ed202c2426c1664016681fb8c1636c4b62cdea6f5a2a6dcafd33840f730dc57", 0x30, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x1}, {0x4, 0x1, 0x5}, {0x3, 0x0, 0x3}, 0x8001, 0xf3b}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'virt_wifi0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0xf29bed5d267874e2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x4, 0x6, 0x0, 0x6, 0x5]}, {0x0, [0x1, 0x0, 0x1, 0x5, 0x0, 0x4], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

20:44:56 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:56 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  467.469928] x_tables: duplicate underflow at hook 2
20:44:56 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'syz_tun\x00'})

20:44:56 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x128, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)

[  467.492681] ubi0: attaching mtd0
20:44:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip_vti0\x00', 0x0})

20:44:56 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0)

[  467.554554] ubi0: scanning is finished
20:44:56 executing program 5:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000002c0))

20:44:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f00000008c0)={'tunl0\x00', 0x0})

20:44:56 executing program 0:
timer_create(0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0)

20:44:56 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x2)
write$evdev(r0, &(0x7f000004d000), 0x30452e29)
ioctl$EVIOCSCLOCKID(r0, 0x80084502, &(0x7f0000000040))
write$evdev(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1670e68)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000006280), 0x0, 0x0)

20:44:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wg2\x00', 'wlan0\x00'}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "42146de80d97430863e2aca05cce00828890b18e1984c9fd5bb47288fc20cbc1dd8d30d942dbb198a6c36223e9ef6d17947bb8e6a5d98e3af913215e3ab9fabe0c1bd50758630d45e6b31d4e18e1909d7164c4ce92e3899be229c8f7071023da9ed202c2426c1664016681fb8c1636c4b62cdea6f5a2a6dcafd33840f730dc57"}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'virt_wifi0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

20:44:56 executing program 5:
syz_clone(0x20005000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  467.815607] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  467.829970] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  467.837728] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  467.845008] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  467.861970] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  467.876136] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  467.882521] x_tables: duplicate underflow at hook 2
[  467.897838] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  467.958583] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  467.979900] ubi0: background thread "ubi_bgt0d" started, PID 328
[  467.979931] ubi: mtd0 is already attached to ubi0
[  468.000869] ubi0: detaching mtd0
[  468.008549] ubi0: mtd0 is detached
20:44:56 executing program 0:
syz_clone(0x20005000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)='a')

20:44:56 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:56 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x2, &(0x7f0000000040)=@raw=[@cb_func], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

20:44:56 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'wg2\x00', 'wlan0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'virt_wifi0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)

20:44:56 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000500)='./file0\x00', 0x200, 0x0)

[  468.113216] ubi0: attaching mtd0
[  468.157568] ubi0: scanning is finished
20:44:56 executing program 5:
r0 = getpgid(0xffffffffffffffff)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x401, 0x0, 0x1}, &(0x7f00000000c0)=[{}])
ptrace$setsig(0x4203, r0, 0x79790b96, &(0x7f0000000140)={0x0, 0x0, 0x9})
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000240)=[{}, {}, {}])
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffc01}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x85f}]}, 0x70}, 0x1, 0x0, 0x0, 0x30000800}, 0x0)
ptrace$setsig(0x4203, 0x0, 0xffffffffffff0000, &(0x7f00000006c0)={0x38, 0x3, 0x9})
r1 = syz_clone(0x20005000, &(0x7f0000000740)="572c16bcb67bc18554ce4fe23ccf99d51d56f2f2bfa3413802a19dec959c20dfa9e8fd3bd9c8a427f8093bd1e7e8289a0a70dfa82d7e0bc1e6688f08da08ba60205e68439bace1d5d3bc347f856d59a5bcd9398d32fa60de7e2cd1b32662f723f17acbe83abb593d43057080dfc327fa94947b131d0f4f91698a1d2207473453e29009181f8965a473b8d400e96a3b2415587710d573e6e0635011e1a7fe7d9e8a422557c97b11cad13b90d88b3329f55eae2d3ebbef0d2738c3d430dcf1beb1", 0xc0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="616df0ac0dda6ed649b273c15b79276d616f5d9766929422f052a9fc8ea3f7b05ede65efa8d42e397de6961c5e0829dbf69d8423052062beabd834713de112015b9e1b8b10c4ec7181404ac99411e2ac31efb3a17609d77e65b99b01ae272658a2715c4aa8b9584b3f66e6318cf5067ba01d66e46e6d69b7827f67e5218fcec54f1c392741c8d0abc8224012140dfeaf0e36f42489b78e4e65e2f8a72027905d85d345532cde3619704e03815f316a8fbc613ec72a8412a236ceb3f103e74ba53f6fc3bf541f0a9f99684e9b5e29b66f859f3e069f08447cf050d37c8e8797cb97230b7833f02e7d3de2b3")
rt_tgsigqueueinfo(r1, r0, 0x25, &(0x7f0000000980)={0x0, 0x2, 0x7fffffff})
syz_clone(0x0, &(0x7f0000000a00)="7a9f119888bc2856eb865f7fa04f4b6800152b2581ad31e0ccad4c78ba3cd58869f1f5c0a37e55e98703a7a4f4c1e31171a7d5685abf63706c69839276eb607d9084367a69cb6915ace57bb8ba1b1b39e7e7894eabfc040f698dc06cf3ac63be1e61927087094cd26c39156bc5b1b5a9de85dd31a1b1927d3d7e83504476868b2e80d30605ea2460081968ca962ae3ef238e4e741db6db8c0e572a4e6ceecf813b879aa7737109fb7e871eb2214b1fdb", 0xb0, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="78fc76bd2c224a61d058ca1d6c56b11d00316445aa3a15d25d2660890131bf0026d58510839653668a675078f21c9aca6adeb313a1fbdc6956621ecb3ae3c900053e86753fcaf5337423a03b1a91ca3646bfbae5fa7de8ddb89549b528e582b62fe924bce61eb599b39d3a905c72a1c4ea5c01726ce248b80eb968664ab0f63f3ba83365dace10f56517018b2875a694982811574e06671dc861f7669435abca021c10862a723e87db193dde203b9ca59261821c3ae5216ae95e877fbd27ab8fe3d2ba51")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvfrom$unix(r2, &(0x7f00000010c0)=""/100, 0x64, 0x40000000, &(0x7f0000001140)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

20:44:57 executing program 4:
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000007c0)={{}, 0x0, 0x0, @unused, @devid})
prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/146)

20:44:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})

[  468.453054] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  468.460960] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  468.481375] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  468.492338] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  468.502076] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  468.512645] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  468.522844] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  468.538859] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  468.592831] ubi0: background thread "ubi_bgt0d" started, PID 381
[  468.599667] ubi: mtd0 is already attached to ubi0
[  468.607299] ubi0: detaching mtd0
[  468.612267] ubi0: mtd0 is detached
20:44:58 executing program 2:
openat$null(0xffffffffffffff9c, &(0x7f00000014c0), 0x4000, 0x0)

20:44:58 executing program 4:
bpf$MAP_CREATE(0xc, &(0x7f00000013c0)=@bloom_filter, 0x48)

20:44:58 executing program 0:
bpf$MAP_CREATE(0x23, &(0x7f00000013c0)=@bloom_filter, 0x48)

20:44:58 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:58 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:58 executing program 5:
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)

20:44:58 executing program 0:
socketpair(0x3e89cfdabef4d076, 0x0, 0x0, &(0x7f0000000340))

20:44:58 executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080))

20:44:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x401c5820, 0x0)

20:44:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000008c0)={'tunl0\x00', 0x0})

20:44:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0)

[  469.745744] ubi0: attaching mtd0
20:44:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001240)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f342a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a51f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000000000000db3947c8dc7b1b4c4554ffdca8b7fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419efaefb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d3ab254934d905d30dfe64d05ac37ed018494d9d10d76e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf9e291200df6bb669d5a57dd74df817ef2f8848f710c3527f829866e4e84aa92000000000072b08b3ac52db204399e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='sched_switch\x00', r3}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae18, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  469.822113] ubi0: scanning is finished
20:44:58 executing program 2:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd='], 0x0, 0x0, 0x0)

20:44:58 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x0)

20:44:58 executing program 0:
syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000440)="e8")
pipe2$watch_queue(&(0x7f0000000380), 0x80)

[  470.072789] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  470.079743] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  470.087088] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  470.094101] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  470.100903] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  470.108396] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:44:58 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:58 executing program 4:
socketpair(0x9, 0x0, 0x0, &(0x7f0000000200))

20:44:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x10000811)

20:44:58 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080))

20:44:58 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  470.116559] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  470.126726] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  470.136619] ubi0: background thread "ubi_bgt0d" started, PID 439
[  470.142883] ubi: mtd0 is already attached to ubi0
[  470.150281] ubi0: detaching mtd0
[  470.158160] ubi0: mtd0 is detached
[  470.230033] ubi0: attaching mtd0
20:44:59 executing program 0:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0)

20:44:59 executing program 4:
lstat(&(0x7f0000000080)='.\x00', 0x0)

20:44:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0x200)
sendfile(r3, r4, 0x0, 0xef84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
sendfile(r6, r5, 0x0, 0x0)

[  470.255568] ubi0: scanning is finished
[  470.374112] audit: type=1800 audit(1672865099.149:33): pid=464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15103 res=0
[  470.406925] audit: type=1804 audit(1672865099.169:34): pid=464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir858591389/syzkaller.lW9qsM/417/file0" dev="sda1" ino=15103 res=1
[  470.501176] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  470.511956] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  470.523428] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  470.529912] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  470.540505] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  470.550738] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  470.562363] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  470.571946] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  470.583469] ubi0: background thread "ubi_bgt0d" started, PID 475
[  470.583771] ubi: mtd0 is already attached to ubi0
[  470.598565] ubi0: detaching mtd0
[  470.611610] ubi0: mtd0 is detached
20:44:59 executing program 5:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0xe6b4c1448857a211)

20:44:59 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x92c00, 0x0)

20:44:59 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)

20:44:59 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:44:59 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:44:59 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

20:44:59 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)

[  470.837720] ubi0: attaching mtd0
20:44:59 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11}, 0x48)

20:44:59 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000004880)='./file0\x00', 0x0)

20:44:59 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

[  470.889329] ubi0: scanning is finished
20:44:59 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

20:44:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b07073f00356d0000000000000000000000000600000000000000000000004000"/53], 0x40)
openat$null(0xffffffffffffff9c, &(0x7f0000006280), 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000064c0)={0x18, 0x9, &(0x7f00000062c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce8a}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000006340)='GPL\x00', 0x0, 0x74, &(0x7f0000006380)=""/116, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000006400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000006440)={0x3, 0x5, 0x1, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000006480)=[0x1]}, 0x80)
openat$uhid(0xffffffffffffff9c, &(0x7f0000006580), 0x802, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102}}}})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400))
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001c40))

20:44:59 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x221}, 0x14}}, 0x0)

20:44:59 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0)

20:44:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0x200)
sendfile(r3, r4, 0x0, 0xef84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x0)
read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))

[  471.136423] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  471.159305] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  471.195304] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  471.220109] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  471.227170] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  471.239990] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  471.247953] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  471.262615] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  471.272465] ubi0: background thread "ubi_bgt0d" started, PID 522
[  471.275411] ubi: mtd0 is already attached to ubi0
[  471.285862] ubi0: detaching mtd0
[  471.371891] audit: type=1800 audit(1672865100.119:35): pid=535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=14610 res=0
[  471.563128] ubi0: mtd0 is detached
20:45:00 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  471.809475] audit: type=1804 audit(1672865100.129:36): pid=535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir858591389/syzkaller.lW9qsM/421/file0" dev="sda1" ino=14610 res=1
20:45:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f00000008c0)={'tunl0\x00', 0x0})

20:45:00 executing program 4:
syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xb0, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0)

20:45:00 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:00 executing program 0:
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000017c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'wg2\x00', 'wlan0\x00', {}, {}, 0x2e, 0x3, 0x1}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x100, 0x2, 'fsm\x00', "42146de80d97430863e2aca05cce00828890b18e1984c9fd5bb47288fc20cbc1dd8d30d942dbb198a6c36223e9ef6d17947bb8e6a5d98e3af913215e3ab9fabe0c1bd50758630d45e6b31d4e18e1909d7164c4ce92e3899be229c8f7071023da9ed202c2426c1664016681fb8c1636c4b62cdea6f5a2a6dcafd33840f730dc57", 0x30, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0x1}, {0x4}, {0x0, 0x0, 0x3}, 0x8001, 0xf3b}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'virt_wifi0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0xf29bed5d267874e2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x4, 0x6, 0x0, 0x6, 0x5], 0x5, 0x6}, {0x3, [0x1, 0x0, 0x1, 0x5, 0x0, 0x4], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

20:45:00 executing program 0:
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r0, r1, 0x0, 0xef84)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))

[  471.965216] x_tables: duplicate underflow at hook 2
20:45:00 executing program 5:
syz_open_dev$mouse(&(0x7f0000000640), 0x0, 0x301000)

20:45:00 executing program 4:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, ',:'}}]}}, 0x0, 0x0, 0x0)

[  471.992943] ubi0: attaching mtd0
20:45:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0x200)
sendfile(r3, r4, 0x0, 0xef84)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
pipe2(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

[  472.029687] audit: type=1800 audit(1672865100.799:37): pid=554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15040 res=0
[  472.037437] ubi0: scanning is finished
20:45:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

20:45:00 executing program 5:
lstat(&(0x7f0000000080)='./file0/file0\x00', 0x0)

[  472.168618] audit: type=1804 audit(1672865100.819:38): pid=554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3494749250/syzkaller.B5JDlw/613/file0" dev="sda1" ino=15040 res=1
20:45:01 executing program 5:
lstat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x414001, 0x0)

[  472.321569] audit: type=1800 audit(1672865101.059:39): pid=580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15081 res=0
[  472.355798] audit: type=1804 audit(1672865101.069:40): pid=580 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir858591389/syzkaller.lW9qsM/422/file0" dev="sda1" ino=15081 res=1
[  472.411347] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  472.424245] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  472.436456] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  472.448462] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  472.458307] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  472.488477] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  472.497678] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  472.512754] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  472.524033] ubi0: background thread "ubi_bgt0d" started, PID 587
[  472.530572] ubi: mtd0 is already attached to ubi0
20:45:01 executing program 5:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="616df0ac0dda6ed649b273c15b79276d616f5d976692")

20:45:01 executing program 0:
rt_tgsigqueueinfo(0x0, 0x0, 0x41, &(0x7f0000000000)={0x25, 0x6, 0x8})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffc01}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30000800}, 0x20004098)
syz_clone(0x20005000, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="616df0ac0dda6ed649b273c15b79276d616f5d9766929422f052a9fc8ea3f7b05ede65efa8d42e397de6961c5e0829dbf69d8423052062beabd834713de112015b9e1b8b10c4ec7181404ac99411e2ac31efb3a17609d77e65b99b01ae272658a2715c4aa8b9584b3f66e6318cf5067ba01d66e46e6d69b7827f67e5218fcec54f1c392741c8d0abc8224012140dfeaf0e36f42489b78e4e65e2f8a72027905d85d345")
syz_clone(0x90000000, &(0x7f0000000a00), 0x0, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="78fc76bd2c224a61d058ca1d6c56b11d00316445aa3a15d25d2660890131bf0026d58510839653668a675078f21c9aca6adeb313a1fbdc6956621ecb3ae3c900053e86753fcaf5337423a03b1a91ca3646bfbae5fa7de8ddb89549b528e582b62fe924bce61eb599b39d3a905c72a1c4ea5c01726ce248b80eb968664ab0f63f3ba83365dace10f56517018b2875a694982811574e06671dc861f7669435abca021c10862a723e87db193dde203b9ca59261821c3ae5216ae95e877fbd27ab8fe3d2ba51")

20:45:01 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:01 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  472.538404] ubi0: detaching mtd0
[  472.552124] ubi0: mtd0 is detached
20:45:01 executing program 5:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, '!*'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, ':'}}]}}, 0x0, 0x0, 0x0)

[  472.665879] ubi0: attaching mtd0
20:45:01 executing program 0:
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001440), 0xc)

[  472.701048] ubi0: scanning is finished
20:45:01 executing program 5:
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0)

20:45:01 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x48)

[  472.923512] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  472.930495] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  472.941855] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  472.954039] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  472.960805] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  472.967775] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  472.981216] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  472.990793] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  473.000394] ubi0: background thread "ubi_bgt0d" started, PID 628
[  473.006778] ubi: mtd0 is already attached to ubi0
[  473.011661] ubi0: detaching mtd0
20:45:01 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
dup2(r0, 0xffffffffffffffff)

[  473.022282] ubi0: mtd0 is detached
20:45:01 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x0, 0x0, 0xfffffff9}, 0x48)

20:45:01 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x24}, 0x24}}, 0x0)

20:45:01 executing program 4:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)="e82f642e3b6b7a8a9c1f3c21ee8707178485c53c3a2678b400c673b6743944f06ce2270a084a29a59eb1396f19d365212c6b03d74053f0e84453b9cbb529733108b50ea4475f95cdc5a68b77eeacc897b0da83354a9e36b97fbc67b189c40ef292c45d94defb5c59de7e67bd5c1aec055dc18877b1e1d6f12620456aa232b4426d94f3cadec29ce22c5b5fb7c6970941c84a3744c49f22ce6a6c5488b70aff95af94e34e82b7b93fa40e4d0a736ad67b662a56c76aa02cb62dab7a71ffde7b0ed1068a7d469cfc1a4e1820c54d28943048034f9b1c0b25c0c30cf8c7aeda81b514a6fb2a9ac6fbff25a600"/245)
pipe2$watch_queue(0x0, 0x80)

20:45:01 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:01 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x128, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)

20:45:01 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:02 executing program 4:
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x0)

20:45:02 executing program 2:
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0)

20:45:02 executing program 0:
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[  473.188616] x_tables: duplicate underflow at hook 2
[  473.192410] ubi0: attaching mtd0
[  473.204264] ubi0: scanning is finished
20:45:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
sendfile(r3, r2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

20:45:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8992, &(0x7f00000008c0)={'tunl0\x00', 0x0})

20:45:02 executing program 2:
rt_tgsigqueueinfo(0x0, 0x0, 0x41, &(0x7f0000000000)={0x25, 0x6, 0x8})
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080), &(0x7f00000000c0))
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, 0x0)
syz_clone(0x20005000, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880))
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0)

20:45:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'syztnl0\x00', 0x0})

[  473.360622] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  473.390038] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
20:45:02 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, "aa0849ae6b72203a"})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffde3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x8)

[  473.410284] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
20:45:02 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0)

[  473.467312] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  473.495001] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
20:45:02 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  473.510226] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:45:02 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:02 executing program 0:
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

20:45:02 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@bloom_filter, 0x20001408)

[  473.510241] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  473.510252] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  473.510286] ubi0: background thread "ubi_bgt0d" started, PID 669
[  473.510381] ubi: mtd0 is already attached to ubi0
20:45:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}})

20:45:02 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x3b0, 0x0, 0xffffffff, 0x2c0, 0x3b0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ipv6={@private1, @mcast1, [], [], 'veth0_virt_wifi\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0xb334c2f4197917ad}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@multicast2, @icmp_id}}}, {{@ipv6={@remote, @remote, [], [], 'wg2\x00', 'sit0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private2, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@mcast1, @empty, [], [], 'netpci0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@private1, @gre_key, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'pim6reg\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@private1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)

[  473.510768] ubi0: detaching mtd0
[  473.512372] ubi0: mtd0 is detached
[  473.642651] ubi0: attaching mtd0
[  473.662506] ubi0: scanning is finished
[  473.820427] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  473.820478] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  473.820503] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  473.820564] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  473.820590] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  473.820648] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  473.820676] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  473.820713] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  473.821015] ubi: mtd0 is already attached to ubi0
[  473.822146] ubi0: detaching mtd0
[  473.831347] ubi0: mtd0 is detached
20:45:02 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000000600)="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", 0x200)
sendfile(r0, r1, 0x0, 0xef84)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)

20:45:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@deltclass={0x24}, 0x24}}, 0x0)

20:45:02 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$mouse(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0)

20:45:02 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

[  474.243315] ubi0: attaching mtd0
[  474.271598] ubi0: scanning is finished
[  474.272432] audit: type=1800 audit(1672865103.039:41): pid=730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14546 res=0
20:45:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev}}}})

20:45:03 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:03 executing program 2:
open$dir(&(0x7f0000000300)='./file0\x00', 0x8441, 0x18)

20:45:03 executing program 0:
syz_open_dev$mouse(&(0x7f0000000640), 0x0, 0x0)

[  474.279169] audit: type=1804 audit(1672865103.049:42): pid=730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir273499909/syzkaller.4QKHUE/779/file0" dev="sda1" ino=14546 res=1
[  474.439410] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  474.454314] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  474.478822] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
20:45:03 executing program 0:
socketpair(0x2c, 0x3, 0x1, &(0x7f0000000000))

20:45:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000340), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000026c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000595000000000000009500a505000000007751e8ba639a67880141cca555077e3a2c58cce0bdbe7d1ae6dc5b159110193dd2ff1fa7c3205bfedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd06506d7535f7866907dc6751dfced1fd8accae66e8a0e4f653419e173a649c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d566a0f06c54c3a4903ef31c4d4acef2ce3599f455c7a3a48a01010000009f2f0517e4ca0e1803a2971a5026ec0fd97f734c4c815bf697e6bd009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39dc09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c813c254f4348c8d7305000000000000593d60abc9b3e67d127e56f3d3759dcfba613135423564a310eb820634fd4d418ae7efb24305b2bea20007840484511b6efaad206335a30ef7b9e01446a6285f4665a7fe37da2349f8bf4064726dc32add75e0f435f28fbedad7cf971d54a9698cf3270f420edc85c176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d3ab25493418494d9d10d76e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000cc34c49914f1aa198a78e3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d1715c009a58e6eadac8f61b45853673df72dc812f7454ae22d79ac48034282f030408895886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62acbf18b251cda3b29fe17925770fac12cf9e291200df6bb669d5a57060000007ef2f8848f7104356ee2b9f3b19c5c90bbe7e93e425999a6542434350fe35a8cbdece7b06bdf3a676b406df18850df506ec8517b3530796ff61c096cf1f571ab9737e6b1f7e9650823ca025a3ef04d97a5b7d92d3a29c2128513da5b483fa5da21b1459d0943665dc11d039bd5e0718577c95cb37b99974bc8be5c9c42d4da0a080e380fa7fe6015000000000000000000b0fff1161d08fe813e2b01d390d6c250ba26e0fd039d1540aafe20852b3f5eff5408566147b27cebbdb8badf27306f700a670862fd9bba7adc074534b96061eabbb7cf0febef89c4f92bb37fa9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="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", 0x200)
sendfile(r3, r4, 0x0, 0xef84)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe2(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
sendfile(r7, r5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

[  474.498401] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  474.507310] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  474.514388] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  474.531430] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
20:45:03 executing program 2:
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
syz_clone(0x20005000, &(0x7f0000000740), 0x0, &(0x7f0000000800), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0)

[  474.552326] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
20:45:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x4}]}}}}})

[  474.607562] ubi0: background thread "ubi_bgt0d" started, PID 742
[  474.615338] ubi0: detaching mtd0
[  474.624761] ubi0: mtd0 is detached
[  474.635166] ubi0: attaching mtd0
20:45:04 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f00000008c0)={'tunl0\x00', 0x0})

[  475.209530] ubi0: scanning is finished
20:45:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000340), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x460c2, 0x0)
r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r3, r4, 0x0, 0xef84)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe2(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
sendfile(r7, r5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200))

20:45:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f00000008c0)={'tunl0\x00', 0x0})

20:45:04 executing program 5:
timer_create(0x0, &(0x7f0000000000)={0x0, 0x26, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0))

[  475.321189] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
20:45:04 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

[  475.379127] ubi0: attaching mtd0
[  475.402261] ubi0: scanning is finished
20:45:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0)

[  475.553637] kauditd_printk_skb: 2 callbacks suppressed
[  475.553714] audit: type=1800 audit(1672865104.299:45): pid=795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15077 res=0
20:45:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0)

20:45:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0200001900010726bd7000fddbdf2500000000000000000000000000000001ac1414aa0000000000000000000000004e2003ff4e2200080a"], 0x21c}}, 0x0)

20:45:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@updsa={0xf0, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@local}, @in=@private}}, 0xf0}}, 0x0)

[  476.047753] audit: type=1804 audit(1672865104.319:46): pid=795 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir858591389/syzkaller.lW9qsM/433/file0" dev="sda1" ino=15077 res=1
[  476.069659] netlink: 356 bytes leftover after parsing attributes in process `syz-executor.5'.
20:45:04 executing program 0:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0xeffd)

20:45:04 executing program 4:
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x0)

[  476.118554] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  476.178904] ubi0: attaching mtd0
[  476.209458] ubi0: scanning is finished
[  476.257181] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'.
20:45:05 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:05 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r0, 0x0, 0x3, 0x0, &(0x7f0000000040))

20:45:05 executing program 0:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0103000000000000000005000000040003"], 0x1c}}, 0x0)

20:45:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=ANY=[@ANYBLOB="8c"], 0x118c}}, 0x0)

20:45:05 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0xfc, 0x0, @loopback}, 0x20)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x20)

[  476.521782] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  476.534469] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  476.541065] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  476.548677] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  476.560668] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  476.570167] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  476.578791] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  476.588410] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  476.598584] ubi0: background thread "ubi_bgt0d" started, PID 847
[  476.602156] ubi0: detaching mtd0
[  476.611217] ubi0: mtd0 is detached
[  476.615546] ubi0: attaching mtd0
20:45:05 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:05 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

20:45:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

20:45:05 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0)
connect$llc(r0, 0x0, 0x0)

20:45:05 executing program 0:
socketpair(0x5, 0x0, 0x0, &(0x7f0000000280))

[  476.619849] ubi0: scanning is finished
20:45:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)

20:45:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000012000fff"], 0x14}}, 0x0)

[  476.841836] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  476.857036] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  476.867508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  476.876679] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  476.888423] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  476.897265] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  476.906632] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  476.915487] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  476.925193] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  476.935242] ubi0: background thread "ubi_bgt0d" started, PID 874
20:45:05 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x12}, 0x14}}, 0x0)

20:45:05 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x20)

20:45:05 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r0, 0x0, 0xe, 0x0, &(0x7f0000000040))

20:45:05 executing program 2:
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff)

[  476.936375] ubi0: detaching mtd0
[  476.948822] ubi0: mtd0 is detached
[  476.953696] ubi0: attaching mtd0
[  476.975921] ubi0: scanning is finished
[  477.217323] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  477.227781] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  477.236679] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  477.243088] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  477.259467] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  477.269703] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  477.277755] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  477.287415] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  477.297897] ubi0: background thread "ubi_bgt0d" started, PID 905
[  477.302566] ubi0: detaching mtd0
[  477.309955] ubi0: mtd0 is detached
20:45:06 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x47ee, 0x0, @loopback}, 0x20)

20:45:06 executing program 5:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)

20:45:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r2, 0x119, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0)

20:45:06 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:06 executing program 2:
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x5d16c58c3228e7b)

[  477.320613] ubi0: attaching mtd0
[  477.371605] ubi0: scanning is finished
20:45:06 executing program 2:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010300000000000000000b0000000800030080"], 0x1c}}, 0x0)

20:45:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

[  477.590047] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  477.597770] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  477.605084] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  477.611655] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  477.618755] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  477.625344] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  477.632950] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  477.642539] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  477.652018] ubi0: background thread "ubi_bgt0d" started, PID 934
[  477.653647] ubi0: detaching mtd0
[  477.663735] ubi0: mtd0 is detached
[  477.668235] ubi0: attaching mtd0
20:45:06 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:06 executing program 4:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

20:45:06 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000004c0)=""/177, 0x1000000, 0xb1, 0x1}, 0x20)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0)

20:45:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x14, r1, 0x780a5549d95b93e1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)

20:45:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0)

[  477.690753] ubi0: scanning is finished
20:45:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x1c}}, 0x0)

20:45:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newae={0x64, 0x1e, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@rand_addr=' \x01\x00'}, [@lifetime_val={0x24}]}, 0x64}}, 0x0)

[  477.776475] audit: type=1800 audit(1672865106.550:47): pid=944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15161 res=0
20:45:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@local}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

[  477.968318] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  477.978784] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  477.991044] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  478.004453] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  478.011700] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  478.022546] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  478.029982] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  478.040174] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  478.050588] ubi0: detaching mtd0
[  478.054675] ubi0: background thread "ubi_bgt0d" started, PID 963
[  478.065537] ubi0: mtd0 is detached
20:45:06 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:06 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_opts(r0, 0x0, 0xc, 0x0, &(0x7f0000000040))

20:45:06 executing program 2:
dup(0xffffffffffffffff)
mkdir(&(0x7f00000010c0)='./file0\x00', 0x0)
r0 = open(0x0, 0x2000, 0x61)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80001d00c0d0)

20:45:06 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x20)

[  478.072174] ubi0: attaching mtd0
[  478.099386] ubi0: scanning is finished
[  478.154968] audit: type=1800 audit(1672865106.930:48): pid=976 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15155 res=0
[  478.277698] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  478.285191] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  478.292367] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  478.298908] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  478.306339] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  478.313379] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
20:45:07 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:07 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000840)={&(0x7f0000000440), 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)

20:45:07 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000004c0)=""/177, 0x1000000, 0xb1}, 0x120)

20:45:07 executing program 5:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010300000000000000000a0000000800030080"], 0x1c}}, 0x0)

20:45:07 executing program 2:
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/uts\x00')

[  478.320900] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  478.331472] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  478.342185] ubi0: background thread "ubi_bgt0d" started, PID 986
[  478.345987] ubi0: detaching mtd0
[  478.354076] ubi0: mtd0 is detached
[  478.358113] ubi0: attaching mtd0
[  478.400831] ubi0: scanning is finished
20:45:07 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10}, 0x10}}, 0x0)

20:45:07 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, 0x0, 0x0)

20:45:07 executing program 0:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000))

[  478.644612] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  478.655207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  478.669313] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  478.677373] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  478.687546] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  478.695519] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  478.703388] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  478.713299] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  478.723436] ubi0: background thread "ubi_bgt0d" started, PID 1014
[  478.726096] ubi0: detaching mtd0
[  478.735617] ubi0: mtd0 is detached
[  478.739326] ubi0: attaching mtd0
20:45:07 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01000000000000005e5d01"], 0x18}}, 0x0)

20:45:07 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

20:45:07 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10}, 0x10}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x10}, 0x10}}, 0x0)

[  478.744666] ubi0: scanning is finished
[  478.805478] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  478.823530] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  478.843481] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  478.860029] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  478.875915] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  478.894963] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  478.909230] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  478.919674] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  478.929996] ubi0: background thread "ubi_bgt0d" started, PID 1026
[  478.936407] ubi0: detaching mtd0
[  478.942340] ubi0: mtd0 is detached
[  478.946335] ubi0: attaching mtd0
20:45:07 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "b793c17c57c7543cc59ca86e132b5627223502e348674175deca9f9c3f3fcf1eea5f4a23ccf0d6a26b2ba3629c"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xe10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe09, 0x4, "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"}]}]}, 0xec4}}, 0x0)

20:45:07 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)

20:45:07 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x0)

20:45:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0)

[  478.961630] ubi0: scanning is finished
20:45:07 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}}, 0x0)

20:45:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x20}, 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0)

20:45:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0)

[  479.121433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  479.177553] 
[  479.179291] ============================================
[  479.184742] WARNING: possible recursive locking detected
[  479.190193] 4.19.211-syzkaller #0 Not tainted
[  479.194682] --------------------------------------------
[  479.200228] syz-executor.5/1066 is trying to acquire lock:
[  479.205932] 00000000cc4d9456 (rtnl_mutex){+.+.}, at: hsr_dev_destroy+0x1b/0xb0
[  479.213389] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  479.213498] 
[  479.213498] but task is already holding lock:
[  479.213504] 00000000cc4d9456 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80
[  479.220462] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  479.226229] 
[  479.226229] other info that might help us debug this:
[  479.226232]  Possible unsafe locking scenario:
[  479.226232] 
[  479.226234]        CPU0
[  479.226236]        ----
[  479.226238]   lock(rtnl_mutex);
[  479.226244]   lock(rtnl_mutex);
[  479.226249] 
[  479.226249]  *** DEADLOCK ***
[  479.226249] 
[  479.226252]  May be due to missing lock nesting notation
[  479.226252] 
[  479.226261] 1 lock held by syz-executor.5/1066:
[  479.226264]  #0: 00000000cc4d9456 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80
[  479.226289] 
[  479.226289] stack backtrace:
[  479.226301] CPU: 1 PID: 1066 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
[  479.226307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  479.226311] Call Trace:
[  479.226329]  dump_stack+0x1fc/0x2ef
[  479.226345]  __lock_acquire.cold+0x121/0x57e
[  479.226361]  ? enable_ptr_key_workfn+0x30/0x30
[  479.226376]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  479.226395]  ? mark_held_locks+0xf0/0xf0
[  479.236975] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  479.240563]  ? vsscanf+0x1ec/0x25a0
[  479.240578]  ? vsnprintf+0x2cc/0x14f0
[  479.240592]  ? pointer+0x850/0x850
[  479.240621]  ? mark_held_locks+0xa6/0xf0
[  479.247685] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  479.253331]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[  479.253346]  lock_acquire+0x170/0x3c0
[  479.253360]  ? hsr_dev_destroy+0x1b/0xb0
[  479.253373]  ? hsr_dev_destroy+0x1b/0xb0
[  479.253383]  __mutex_lock+0xd7/0x1190
[  479.253395]  ? hsr_dev_destroy+0x1b/0xb0
[  479.253409]  ? full_name_hash+0xb5/0xf0
[  479.253421]  ? hsr_dev_destroy+0x1b/0xb0
[  479.253431]  ? mutex_trylock+0x1a0/0x1a0
[  479.253444]  ? dev_alloc_name_ns+0x390/0x440
[  479.253456]  ? dev_valid_name+0x220/0x220
[  479.253470]  ? ip6_route_dev_notify+0xd7/0xcd0
[  479.253486]  ? hsr_dev_close+0x10/0x10
[  479.258384] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  479.258626]  hsr_dev_destroy+0x1b/0xb0
[  479.258643]  ? hsr_dev_close+0x10/0x10
[  479.262221] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  479.265164]  register_netdevice+0x901/0x10f0
[  479.265180]  ? unregister_netdev+0x20/0x20
[  479.265192]  ? hsr_get_max_mtu+0x1d0/0x2a0
[  479.265215]  ? hsr_add_port+0x4e9/0x6a0
[  479.271496] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  479.278275]  hsr_dev_finalize+0x4f5/0x770
[  479.278289]  hsr_newlink+0x27d/0x3e0
[  479.278303]  ? hsr_fill_info+0x590/0x590
[  479.278316]  ? rtnl_create_link+0x145/0xa40
[  479.278329]  ? hsr_fill_info+0x590/0x590
[  479.278340]  rtnl_newlink+0x1030/0x15c0
[  479.278356]  ? rtnl_getlink+0x620/0x620
[  479.278373]  ? __lock_acquire+0x6de/0x3ff0
[  479.278386]  ? __save_stack_trace+0x72/0x190
[  479.278399]  ? deref_stack_reg+0x134/0x1d0
[  479.278410]  ? get_reg+0x176/0x1f0
[  479.278422]  ? mark_held_locks+0xf0/0xf0
[  479.278435]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  479.278447]  ? deref_stack_reg+0x1d0/0x1d0
[  479.278459]  ? mark_held_locks+0xf0/0xf0
[  479.278475]  ? check_preemption_disabled+0x41/0x280
[  479.278488]  ? __lock_acquire+0x6de/0x3ff0
[  479.278505]  ? mark_held_locks+0xf0/0xf0
[  479.278521]  ? __lock_acquire+0x6de/0x3ff0
[  479.278540]  ? mark_held_locks+0xf0/0xf0
[  479.287959] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  479.291332]  ? _raw_spin_unlock_irq+0x24/0x80
[  479.291350]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  479.291380]  ? mutex_trylock+0x1a0/0x1a0
[  479.301302] ubi0: background thread "ubi_bgt0d" started, PID 1073
[  479.303642]  ? check_preemption_disabled+0x41/0x280
[  479.303657]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  479.303673]  ? rtnl_getlink+0x620/0x620
[  479.303685]  rtnetlink_rcv_msg+0x453/0xb80
[  479.303699]  ? rtnl_calcit.isra.0+0x430/0x430
[  479.303712]  ? memcpy+0x35/0x50
[  479.303727]  ? netdev_pick_tx+0x2f0/0x2f0
[  479.316005] ubi0: detaching mtd0
[  479.316169]  ? __copy_skb_header+0x414/0x500
[  479.322024] ubi0: mtd0 is detached
[  479.325397]  ? kfree_skbmem+0x140/0x140
[  479.325412]  netlink_rcv_skb+0x160/0x440
[  479.325429]  ? rtnl_calcit.isra.0+0x430/0x430
[  479.340074] ubi0: attaching mtd0
[  479.345869]  ? netlink_ack+0xae0/0xae0
[  479.345887]  netlink_unicast+0x4d5/0x690
[  479.345899]  ? netlink_sendskb+0x110/0x110
[  479.345910]  ? _copy_from_iter_full+0x229/0x7c0
[  479.345923]  ? __phys_addr_symbol+0x2c/0x70
[  479.345936]  ? __check_object_size+0x17b/0x3e0
[  479.345947]  netlink_sendmsg+0x6c3/0xc50
[  479.345961]  ? aa_af_perm+0x230/0x230
[  479.345970]  ? nlmsg_notify+0x1f0/0x1f0
[  479.345981]  ? kernel_recvmsg+0x220/0x220
[  479.345993]  ? nlmsg_notify+0x1f0/0x1f0
[  479.346007]  sock_sendmsg+0xc3/0x120
[  479.346017]  ___sys_sendmsg+0x7bb/0x8e0
[  479.346035]  ? copy_msghdr_from_user+0x440/0x440
[  479.360949] ubi0: scanning is finished
[  479.361014]  ? __fget+0x32f/0x510
[  479.361033]  ? lock_downgrade+0x720/0x720
[  479.710187]  ? check_preemption_disabled+0x41/0x280
[  479.715968]  ? check_preemption_disabled+0x41/0x280
[  479.720998]  ? __fget+0x356/0x510
[  479.724447]  ? do_dup2+0x450/0x450
[  479.728077]  ? lock_downgrade+0x720/0x720
[  479.732236]  ? check_preemption_disabled+0x41/0x280
[  479.737244]  ? __fdget+0x1d0/0x230
[  479.740862]  __x64_sys_sendmsg+0x132/0x220
[  479.745177]  ? __sys_sendmsg+0x1b0/0x1b0
[  479.749379]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  479.754745]  ? trace_hardirqs_off_caller+0x6e/0x210
[  479.760203]  ? do_syscall_64+0x21/0x620
[  479.764187]  do_syscall_64+0xf9/0x620
[  479.768088]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  479.773530] RIP: 0033:0x7f77af9d30c9
[  479.777240] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  479.796220] RSP: 002b:00007f77adf24168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.803923] RAX: ffffffffffffffda RBX: 00007f77afaf3050 RCX: 00007f77af9d30c9
[  479.811269] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004
[  479.818619] RBP: 00007f77afa2eae9 R08: 0000000000000000 R09: 0000000000000000
20:45:08 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502)
r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x0, 0x800000003, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r7, 0x0)
fstat(r2, &(0x7f00000002c0))
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r8, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0x0, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r7, 0x0, r3, 0xf)

20:45:08 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000000040))

20:45:08 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000004c0)=""/177, 0x1000000, 0xb1, 0x1}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

20:45:08 executing program 0:
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff)

[  479.825879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.833410] R13: 00007ffc228c8ddf R14: 00007f77adf24300 R15: 0000000000022000
20:45:08 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502)
r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x0, 0x800000003, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001240)={0x0, 0x0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x40, 0x0, 0x20, 0xf9, 0x0, 0x9, 0x81, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0xd89, 0x2, 0xcaf5d4d0f17e14f5, 0x2, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, r6, 0x0)
fstat(r1, &(0x7f00000002c0))
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$cont(0x4204, r7, 0x8, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80ffff00000000, 0x4}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x8004)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40046f41, 0x20000502)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="000a000000000000010900000000000000000007480000000310203f00040000000000000006000000000000000900000000000000060000000000000001000000000000000100000000000000d10b0000000000000100"/96], 0x60)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x89, 0x3, 0x1, 0xf8, 0x0, 0xffffffff, 0x1000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x8000, 0x4d6, 0x3ff, 0x8, 0xce, 0x3, 0x1, 0x0, 0x8, 0x0, 0x8}, r6, 0x0, r2, 0xf)

20:45:08 executing program 4:
bpf$OBJ_GET_PROG(0x21, &(0x7f0000000200)={&(0x7f00000001c0)='.\x00'}, 0x10)

20:45:08 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
sendto$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:45:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@private2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}}, 0x0)

[  479.985347] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  479.998874] ubi0: attaching mtd0
[  480.006570] ubi0: scanning is finished
20:45:08 executing program 4:
r0 = socket(0x23, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x8040890)

20:45:08 executing program 0:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x10}, 0x10}}, 0x0)

[  480.107955] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  480.117318] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  480.132039] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  480.138911] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  480.146456] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  480.152809] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  480.160314] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  480.173558] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  480.183377] ubi0: background thread "ubi_bgt0d" started, PID 1114
[  480.183460] ubi0: detaching mtd0
[  480.197975] ubi0: mtd0 is detached
[  480.202476] ubi0: attaching mtd0
[  480.206304] ubi0: scanning is finished
[  480.246630] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  480.255294] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  480.262938] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  480.269308] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  480.278205] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  480.284387] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  480.293082] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1878034059
[  480.302413] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  480.312233] ubi0: background thread "ubi_bgt0d" started, PID 1126
[  480.314192] ubi0: detaching mtd0
[  480.323796] ubi0: mtd0 is detached