UEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 976.179102] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 976.190742] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 976.208273] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 976.216690] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 976.224252] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 976.240824] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 976.257934] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 976.269871] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:05:56 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 976.279685] ubi0: background thread "ubi_bgt0d" started, PID 15913 [ 976.286447] ubi0: detaching mtd0 [ 976.293159] ubi0: mtd0 is detached [ 976.306637] ubi0: attaching mtd0 [ 976.352953] ubi0: scanning is finished [ 976.411484] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 976.418597] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 976.425326] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 976.431804] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 976.438694] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 976.445090] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 976.452992] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 976.462815] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 976.473241] ubi0: background thread "ubi_bgt0d" started, PID 15927 [ 976.479796] ubi: mtd0 is already attached to ubi0 [ 976.499025] ubi: mtd0 is already attached to ubi0 09:05:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:05:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 976.518244] ubi0: detaching mtd0 [ 976.530613] ubi0: mtd0 is detached [ 976.539792] ubi0: attaching mtd0 09:05:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 976.567104] ubi0: scanning is finished [ 976.641938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 976.787084] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 976.789991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15947 comm=syz-executor.2 [ 976.812914] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 976.819932] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 976.842429] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 976.849475] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 976.871697] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 976.879073] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 976.889586] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 976.900547] ubi0: background thread "ubi_bgt0d" started, PID 15950 [ 976.907656] ubi0: detaching mtd0 [ 976.916628] ubi0: mtd0 is detached [ 976.920710] ubi0: attaching mtd0 09:05:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 976.954235] ubi0: scanning is finished 09:05:57 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 977.119159] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 977.127929] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 977.135838] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 977.143158] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 977.150205] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 977.157792] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:05:57 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:05:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 977.166618] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 977.178427] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 977.188723] ubi0: background thread "ubi_bgt0d" started, PID 15966 [ 977.195839] ubi: mtd0 is already attached to ubi0 [ 977.201329] ubi0: detaching mtd0 [ 977.211268] ubi0: mtd0 is detached 09:05:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 977.233250] ubi0: attaching mtd0 [ 977.276015] ubi0: scanning is finished [ 977.458221] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 977.467846] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 977.484688] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 977.495550] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 977.505641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 977.517083] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 977.528937] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 977.541549] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 977.558837] ubi0: background thread "ubi_bgt0d" started, PID 15989 [ 977.568639] ubi: mtd0 is already attached to ubi0 [ 977.574178] ubi: mtd0 is already attached to ubi0 [ 977.590761] ubi0: detaching mtd0 [ 977.598165] ubi0: mtd0 is detached [ 977.603343] ubi0: attaching mtd0 09:05:58 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:05:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 977.660533] ubi0: scanning is finished [ 977.821457] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 977.829299] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 977.840488] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 977.853920] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 977.860846] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 977.869179] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 977.877521] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 977.889912] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 977.900176] ubi0: background thread "ubi_bgt0d" started, PID 16005 [ 977.900424] ubi: mtd0 is already attached to ubi0 [ 977.924840] ubi0: detaching mtd0 [ 977.931037] ubi0: mtd0 is detached [ 977.946590] ubi0: attaching mtd0 [ 977.975039] ubi0: scanning is finished [ 978.102916] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 978.115761] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 978.122432] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 978.128731] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 978.137150] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 978.144020] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 978.151365] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 978.162739] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 978.172110] ubi0: background thread "ubi_bgt0d" started, PID 16013 09:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:06:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:02 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 981.675272] ubi0: detaching mtd0 [ 981.696446] ubi0: mtd0 is detached [ 981.725125] ubi0: attaching mtd0 09:06:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 981.768502] ubi0: scanning is finished 09:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 981.809977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:06:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 981.946815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16034 comm=syz-executor.5 09:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 982.072052] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 982.094954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 982.121986] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 982.135031] ubi0: VID header offset: 64 (aligned 64), data offset: 128 09:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 982.168373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 982.193928] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 982.210870] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 982.238346] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 982.262798] ubi0: background thread "ubi_bgt0d" started, PID 16060 09:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 982.262901] ubi: mtd0 is already attached to ubi0 09:06:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 982.342019] ubi: mtd0 is already attached to ubi0 [ 982.347118] ubi: mtd0 is already attached to ubi0 [ 982.389840] ubi0: detaching mtd0 [ 982.410299] ubi0: mtd0 is detached [ 982.427060] ubi0: attaching mtd0 [ 982.435806] ubi0: scanning is finished [ 982.533671] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 982.551846] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 982.558625] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 982.576972] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 982.585482] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 982.595572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 982.605472] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 982.623426] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 982.634345] ubi0: background thread "ubi_bgt0d" started, PID 16088 09:06:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:07 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:07 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 09:06:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 986.614530] ubi0: detaching mtd0 [ 986.649070] ubi0: mtd0 is detached [ 986.660355] ubi0: attaching mtd0 [ 986.707036] ubi0: scanning is finished [ 986.721256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:06:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 986.803462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 986.848576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16114 comm=syz-executor.0 [ 986.919362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16106 comm=syz-executor.5 09:06:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 986.965287] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 986.976745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 986.985459] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 986.993884] ubi0: VID header offset: 64 (aligned 64), data offset: 128 09:06:07 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 987.012900] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 987.038693] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 987.069010] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:06:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 987.095398] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 987.119055] ubi0: background thread "ubi_bgt0d" started, PID 16138 [ 987.138114] ubi: mtd0 is already attached to ubi0 09:06:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:07 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 987.156612] ubi: mtd0 is already attached to ubi0 [ 987.163925] ubi0: detaching mtd0 [ 987.170182] ubi0: mtd0 is detached [ 987.194291] ubi0: attaching mtd0 09:06:07 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 987.220025] ubi0: scanning is finished 09:06:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 987.467862] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 987.483649] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 987.499852] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 09:06:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 987.520417] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 987.553809] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 987.567728] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 987.586767] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 987.602447] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:06:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 987.615802] ubi0: background thread "ubi_bgt0d" started, PID 16177 09:06:08 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 987.644814] ubi0: detaching mtd0 [ 987.650192] ubi0: mtd0 is detached [ 987.663089] ubi0: attaching mtd0 [ 987.667449] ubi0: scanning is finished [ 987.874985] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 987.886499] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 987.897831] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 987.905720] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 987.915888] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 987.922906] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 987.930911] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 987.940462] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 987.949971] ubi0: background thread "ubi_bgt0d" started, PID 16202 [ 987.956563] ubi0: detaching mtd0 [ 987.966758] ubi0: mtd0 is detached [ 987.974832] ubi0: attaching mtd0 [ 988.015120] ubi0: scanning is finished [ 988.075071] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 988.093452] ubi0: attaching mtd0 [ 988.101664] ubi0: scanning is finished [ 988.179191] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 988.205995] ubi0: attaching mtd0 [ 988.268755] ubi0: scanning is finished [ 988.413886] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 988.425625] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 988.434316] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 988.445427] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 988.455370] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 988.466383] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 988.474707] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 988.489019] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 988.499641] ubi0: background thread "ubi_bgt0d" started, PID 16224 09:06:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:12 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:12 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 992.087589] ubi0: detaching mtd0 [ 992.109395] ubi0: mtd0 is detached 09:06:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 992.137026] ubi0: attaching mtd0 [ 992.141394] ubi0: scanning is finished [ 992.162440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 992.237893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 992.243993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16237 comm=syz-executor.5 09:06:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 992.325004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16263 comm=syz-executor.0 09:06:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 992.418535] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 992.442288] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 09:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 992.478623] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 992.489210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 992.509149] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 992.556847] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 992.592877] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 992.601605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16287 comm=syz-executor.5 [ 992.631958] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 992.685411] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:13 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 992.732689] ubi0: background thread "ubi_bgt0d" started, PID 16273 [ 992.749059] ubi: mtd0 is already attached to ubi0 [ 992.766018] ubi: mtd0 is already attached to ubi0 [ 992.867643] ubi: mtd0 is already attached to ubi0 09:06:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 996.981865] ubi0: detaching mtd0 [ 996.994105] ubi0: mtd0 is detached [ 997.016711] ubi0: attaching mtd0 09:06:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 997.074519] ubi0: scanning is finished [ 997.255812] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 997.264532] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 997.272771] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 997.280760] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 997.287654] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 997.294912] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 997.303583] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 997.313829] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 997.323943] ubi0: background thread "ubi_bgt0d" started, PID 16340 [ 997.331090] ubi: mtd0 is already attached to ubi0 [ 997.336204] ubi: mtd0 is already attached to ubi0 09:06:17 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 997.352913] ubi: mtd0 is already attached to ubi0 [ 997.357907] ubi0: detaching mtd0 09:06:17 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 997.379034] ubi0: mtd0 is detached 09:06:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 997.402319] ubi0: attaching mtd0 [ 997.419730] ubi0: scanning is finished [ 997.618513] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 997.629012] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 997.643734] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 997.658915] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 997.675232] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 997.687999] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 997.707624] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 997.727077] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 997.746882] ubi0: background thread "ubi_bgt0d" started, PID 16366 [ 997.754206] ubi0: detaching mtd0 [ 997.764941] ubi0: mtd0 is detached 09:06:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:18 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 997.779378] ubi0: attaching mtd0 [ 997.783569] ubi0: scanning is finished [ 997.880436] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 997.887745] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 997.917475] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 997.935007] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 997.951516] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 997.957840] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 997.973019] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 997.983171] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 997.993786] ubi0: background thread "ubi_bgt0d" started, PID 16383 [ 998.001147] ubi: mtd0 is already attached to ubi0 [ 998.006240] ubi: mtd0 is already attached to ubi0 [ 998.014878] ubi0: detaching mtd0 [ 998.052620] ubi0: mtd0 is detached [ 998.056523] ubi0: attaching mtd0 [ 998.096666] ubi0: scanning is finished [ 998.260834] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 998.267821] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 998.279109] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 998.285567] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 998.296916] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 998.303526] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 998.316888] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 998.326775] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 998.340776] ubi0: background thread "ubi_bgt0d" started, PID 16404 09:06:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:22 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:22 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 09:06:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:22 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:22 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) [ 1001.956602] ubi0: detaching mtd0 [ 1001.964876] ubi0: mtd0 is detached [ 1001.976189] ubi0: attaching mtd0 [ 1001.980803] ubi0: scanning is finished [ 1002.072444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1002.094219] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1002.108717] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1002.123399] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1002.137688] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1002.153447] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1002.166268] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1002.182051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16439 comm=syz-executor.0 [ 1002.187158] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:06:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1002.231559] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1002.249960] ubi0: background thread "ubi_bgt0d" started, PID 16436 [ 1002.263611] ubi: mtd0 is already attached to ubi0 [ 1002.268910] ubi: mtd0 is already attached to ubi0 [ 1002.273983] ubi0: detaching mtd0 [ 1002.310117] ubi0: mtd0 is detached 09:06:22 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1002.334345] ubi0: attaching mtd0 09:06:22 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 09:06:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1002.355030] ubi0: scanning is finished [ 1002.480494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.521703] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1002.530932] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1002.546535] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1002.566311] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1002.581083] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1002.593121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16472 comm=syz-executor.2 [ 1002.610181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16474 comm=syz-executor.0 [ 1002.623806] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1002.640319] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1002.670612] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1002.679948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1002.729690] ubi0: background thread "ubi_bgt0d" started, PID 16469 [ 1002.738555] ubi0: detaching mtd0 [ 1002.745218] ubi0: mtd0 is detached [ 1002.775213] ubi0: attaching mtd0 [ 1002.822297] ubi0: scanning is finished [ 1003.007519] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1003.024175] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1003.031178] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1003.037598] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1003.046946] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1003.053843] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1003.066311] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1003.076518] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1003.088643] ubi0: background thread "ubi_bgt0d" started, PID 16492 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:06:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1006.835264] ubi0: detaching mtd0 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x1, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1006.856925] ubi0: mtd0 is detached [ 1006.869243] ubi0: attaching mtd0 [ 1006.906346] ubi0: scanning is finished [ 1006.923879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:06:27 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1006.988862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16517 comm=syz-executor.2 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1007.264675] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1007.285787] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1007.295043] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1007.304930] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1007.315059] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1007.327172] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1007.345505] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1007.361311] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1007.380954] ubi0: background thread "ubi_bgt0d" started, PID 16552 [ 1007.398763] ubi0: detaching mtd0 [ 1007.411664] ubi0: mtd0 is detached 09:06:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1007.423488] ubi0: attaching mtd0 09:06:28 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1007.487527] ubi0: scanning is finished 09:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1007.681944] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1007.707534] ubi0: attaching mtd0 [ 1007.725271] ubi0: scanning is finished [ 1007.840393] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1007.862414] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1007.874764] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1007.897059] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1007.903901] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1007.915061] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1007.923042] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1007.937503] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1007.952909] ubi0: background thread "ubi_bgt0d" started, PID 16592 [ 1007.962582] ubi0: detaching mtd0 [ 1007.968345] ubi0: mtd0 is detached 09:06:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:06:32 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:32 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:32 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1011.920466] ubi0: attaching mtd0 [ 1011.941066] ubi0: scanning is finished 09:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1012.051838] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1012.064587] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1012.080367] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1012.094793] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1012.110164] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1012.116400] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1012.124099] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1012.133919] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1012.143623] ubi: mtd0 is already attached to ubi0 [ 1012.144149] ubi0: background thread "ubi_bgt0d" started, PID 16631 [ 1012.149109] ubi: mtd0 is already attached to ubi0 09:06:32 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1012.160740] ubi0: detaching mtd0 09:06:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:32 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1012.223180] ubi0: mtd0 is detached [ 1012.247137] ubi0: attaching mtd0 [ 1012.293369] ubi0: scanning is finished [ 1012.490572] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1012.502538] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1012.525981] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1012.541504] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1012.564861] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1012.579249] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1012.604187] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1012.623511] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1012.633250] ubi0: background thread "ubi_bgt0d" started, PID 16662 [ 1012.661617] ubi0: detaching mtd0 [ 1012.675314] ubi0: mtd0 is detached [ 1012.685012] ubi0: attaching mtd0 [ 1012.691678] ubi0: scanning is finished [ 1012.803606] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1012.814552] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1012.823716] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1012.834580] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1012.842973] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1012.853609] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1012.862437] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1012.875913] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1012.886914] ubi0: background thread "ubi_bgt0d" started, PID 16674 [ 1012.899678] ubi: mtd0 is already attached to ubi0 09:06:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:06:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1016.854255] ubi0: detaching mtd0 [ 1016.869591] ubi0: mtd0 is detached [ 1016.887815] ubi0: attaching mtd0 09:06:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1016.903476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1016.928536] ubi0: scanning is finished [ 1016.991309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16685 comm=syz-executor.0 09:06:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1017.180689] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1017.195747] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1017.228943] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1017.233347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1017.256604] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1017.274597] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1017.301765] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1017.331523] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1017.353228] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1017.362916] ubi0: background thread "ubi_bgt0d" started, PID 16730 [ 1017.368547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16744 comm=syz-executor.0 [ 1017.372777] ubi: mtd0 is already attached to ubi0 09:06:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1017.401961] ubi0: detaching mtd0 [ 1017.415139] ubi0: mtd0 is detached 09:06:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1017.521660] ubi0: attaching mtd0 [ 1017.576761] ubi0: scanning is finished [ 1017.769483] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1017.781438] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1017.788550] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1017.794994] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1017.809019] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1017.815402] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1017.829318] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1017.840499] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1017.854320] ubi0: background thread "ubi_bgt0d" started, PID 16774 [ 1017.863149] ubi0: detaching mtd0 [ 1017.878386] ubi0: mtd0 is detached 09:06:42 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:42 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1021.720806] ubi0: attaching mtd0 [ 1021.740364] ubi0: scanning is finished 09:06:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1021.789020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1021.843472] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1021.853261] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1021.864077] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1021.880064] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1021.887210] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:06:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1021.895825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16814 comm=syz-executor.0 [ 1021.912527] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1021.920540] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1021.948205] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1021.959985] ubi0: background thread "ubi_bgt0d" started, PID 16809 [ 1021.971385] ubi0: detaching mtd0 [ 1021.988562] ubi0: mtd0 is detached [ 1021.994939] ubi0: attaching mtd0 09:06:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:42 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1022.045745] ubi0: scanning is finished 09:06:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1022.229468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1022.313381] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1022.339319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16850 comm=syz-executor.2 [ 1022.342515] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 09:06:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1022.434172] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1022.448530] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1022.458698] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1022.465240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1022.474574] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1022.501514] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1022.522741] ubi0: background thread "ubi_bgt0d" started, PID 16849 [ 1022.529195] ubi: mtd0 is already attached to ubi0 [ 1022.534102] ubi0: detaching mtd0 [ 1022.542724] ubi0: mtd0 is detached 09:06:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:43 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1022.551481] ubi0: attaching mtd0 09:06:43 executing program 5: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1022.615229] ubi0: scanning is finished 09:06:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:43 executing program 5: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1022.702610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:06:43 executing program 5: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1022.776598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16872 comm=syz-executor.2 09:06:43 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1022.936831] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1022.948803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1022.964776] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1022.992239] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1023.001903] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1023.012170] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:06:43 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:43 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:43 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1023.021727] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1023.034363] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1023.044348] ubi0: background thread "ubi_bgt0d" started, PID 16899 [ 1023.050973] ubi: mtd0 is already attached to ubi0 [ 1023.064940] ubi0: detaching mtd0 09:06:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1023.082056] ubi0: mtd0 is detached [ 1023.086549] ubi0: attaching mtd0 [ 1023.123257] ubi0: scanning is finished 09:06:43 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1023.342940] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1023.350107] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1023.358710] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1023.365448] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1023.384681] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:06:43 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:43 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1023.393534] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1023.402124] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1023.411948] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1023.421869] ubi0: background thread "ubi_bgt0d" started, PID 16937 [ 1023.421874] ubi0: detaching mtd0 [ 1023.448546] ubi0: mtd0 is detached [ 1023.452399] ubi0: attaching mtd0 09:06:44 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1023.506097] ubi0: scanning is finished 09:06:44 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1023.712579] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1023.732628] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1023.750491] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1023.760078] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1023.768480] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1023.774923] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1023.783371] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1023.798717] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1023.811566] ubi0: background thread "ubi_bgt0d" started, PID 16965 [ 1023.811708] ubi: mtd0 is already attached to ubi0 [ 1023.829687] ubi: mtd0 is already attached to ubi0 [ 1023.841977] ubi: mtd0 is already attached to ubi0 09:06:44 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:44 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:44 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:44 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:44 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1023.919194] ubi0: detaching mtd0 [ 1023.932849] ubi0: mtd0 is detached [ 1023.940454] ubi0: attaching mtd0 [ 1024.005205] ubi0: scanning is finished 09:06:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1024.158797] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1024.167129] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1024.183342] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1024.190252] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1024.198821] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:06:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1024.205251] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1024.219623] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1024.236970] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1024.246333] ubi0: background thread "ubi_bgt0d" started, PID 17012 [ 1024.249596] ubi0: detaching mtd0 09:06:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:44 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1024.271875] ubi0: mtd0 is detached [ 1024.278358] ubi0: attaching mtd0 [ 1024.327832] ubi0: scanning is finished 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1024.504720] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1024.521943] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1024.539947] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1024.564475] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1024.571510] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1024.579489] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1024.587506] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1024.601167] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1024.612053] ubi0: background thread "ubi_bgt0d" started, PID 17040 [ 1024.619432] ubi: mtd0 is already attached to ubi0 [ 1024.624593] ubi: mtd0 is already attached to ubi0 [ 1024.631796] ubi0: detaching mtd0 [ 1024.648196] ubi0: mtd0 is detached 09:06:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {0xffffffffffffffff, 0x12a6}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:45 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:45 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:45 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) [ 1024.676135] ubi0: attaching mtd0 [ 1024.680399] ubi0: scanning is finished 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1024.760758] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1024.791890] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1024.804522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1024.815061] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1024.823115] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1024.845374] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1024.873619] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1024.882143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17059 comm=syz-executor.0 [ 1024.901260] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:06:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:45 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 1024.945138] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1024.960411] ubi0: background thread "ubi_bgt0d" started, PID 17066 [ 1024.967131] ubi0: detaching mtd0 [ 1024.975375] ubi0: mtd0 is detached [ 1024.986812] ubi0: attaching mtd0 09:06:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1025.036029] ubi0: scanning is finished 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 1025.160282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.254352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17099 comm=syz-executor.0 [ 1025.281780] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1025.291571] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1025.307215] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1025.321671] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1025.344071] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1025.358424] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1025.375123] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1025.385721] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1025.395247] ubi0: background thread "ubi_bgt0d" started, PID 17116 [ 1025.402366] ubi: mtd0 is already attached to ubi0 09:06:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 09:06:46 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) 09:06:46 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) [ 1025.418091] ubi0: detaching mtd0 [ 1025.425351] ubi0: mtd0 is detached [ 1025.454921] ubi0: attaching mtd0 09:06:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1025.511680] ubi0: scanning is finished 09:06:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:06:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) [ 1025.852388] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1025.893258] ubi0: attaching mtd0 [ 1025.967232] ubi0: scanning is finished [ 1026.111242] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1026.123276] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1026.131676] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1026.143186] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1026.151186] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1026.163456] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1026.172541] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1026.187300] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1026.200428] ubi0: background thread "ubi_bgt0d" started, PID 17174 09:06:50 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:06:50 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) [ 1030.469896] ubi0: detaching mtd0 [ 1030.479788] ubi0: mtd0 is detached [ 1030.489095] ubi0: attaching mtd0 [ 1030.517952] ubi0: scanning is finished [ 1030.608504] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1030.620191] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1030.628472] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1030.637125] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1030.652528] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:06:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 1030.663861] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1030.672318] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1030.689102] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1030.705649] ubi0: background thread "ubi_bgt0d" started, PID 17205 09:06:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1030.705786] ubi0: detaching mtd0 [ 1030.730316] ubi0: mtd0 is detached [ 1030.743253] ubi0: attaching mtd0 [ 1030.782355] ubi0: scanning is finished 09:06:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:06:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}], 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1030.929109] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1030.940539] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1030.948415] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1030.956487] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1030.963538] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1030.971051] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1030.979705] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1030.994570] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1031.007521] ubi0: background thread "ubi_bgt0d" started, PID 17228 [ 1031.007646] ubi: mtd0 is already attached to ubi0 09:06:51 executing program 2: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1031.049981] ubi0: detaching mtd0 [ 1031.076989] ubi0: mtd0 is detached [ 1031.093338] ubi0: attaching mtd0 [ 1031.139669] ubi0: scanning is finished [ 1031.151721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1031.259112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17246 comm=syz-executor.3 09:06:51 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1031.333561] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1031.348253] ubi0: attaching mtd0 [ 1031.352647] ubi0: scanning is finished [ 1031.452722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1031.460069] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1031.471711] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1031.484692] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1031.527425] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1031.533808] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1031.546832] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1031.559691] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1031.571277] ubi0: background thread "ubi_bgt0d" started, PID 17265 09:06:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1031.581129] ubi: mtd0 is already attached to ubi0 [ 1031.588429] ubi0: detaching mtd0 [ 1031.605373] ubi0: mtd0 is detached [ 1031.623977] ubi0: attaching mtd0 09:06:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:52 executing program 2: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1031.682162] ubi0: scanning is finished [ 1031.905834] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1031.917710] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1031.933334] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1031.949497] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1031.957246] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1031.963414] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1031.972243] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1031.982182] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1031.992154] ubi0: background thread "ubi_bgt0d" started, PID 17293 [ 1031.999181] ubi0: detaching mtd0 09:06:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:06:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1032.006455] ubi0: mtd0 is detached [ 1032.011554] ubi0: attaching mtd0 [ 1032.017232] ubi0: scanning is finished 09:06:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1032.151366] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1032.165223] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1032.171902] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1032.187965] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1032.200080] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1032.209725] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1032.218571] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1032.231735] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1032.241994] ubi0: background thread "ubi_bgt0d" started, PID 17309 [ 1032.252114] ubi: mtd0 is already attached to ubi0 [ 1032.258272] ubi0: detaching mtd0 [ 1032.269383] ubi0: mtd0 is detached [ 1032.275814] ubi0: attaching mtd0 [ 1032.299836] ubi0: scanning is finished [ 1032.434928] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1032.441926] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1032.454821] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1032.461148] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1032.480159] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1032.486679] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1032.494190] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1032.513567] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1032.527807] ubi0: background thread "ubi_bgt0d" started, PID 17324 09:06:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:06:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:56 executing program 2: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 09:06:56 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1036.330622] ubi0: detaching mtd0 [ 1036.336170] ubi0: mtd0 is detached [ 1036.364113] ubi0: attaching mtd0 [ 1036.382991] ubi0: scanning is finished [ 1036.426234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.470781] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1036.481990] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1036.493883] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1036.505160] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1036.511949] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1036.522494] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1036.531059] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1036.545513] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1036.557792] ubi0: background thread "ubi_bgt0d" started, PID 17357 [ 1036.557875] ubi: mtd0 is already attached to ubi0 09:06:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:57 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1036.577900] ubi0: detaching mtd0 [ 1036.584824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17339 comm=syz-executor.3 09:06:57 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1036.622558] ubi0: mtd0 is detached [ 1036.629370] ubi0: attaching mtd0 [ 1036.674072] ubi0: scanning is finished [ 1036.779016] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1036.786056] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1036.792609] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1036.801642] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1036.808579] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1036.815330] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:06:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 1036.822829] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1036.834562] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1036.844112] ubi0: background thread "ubi_bgt0d" started, PID 17382 [ 1036.844260] ubi0: detaching mtd0 [ 1036.862195] ubi0: mtd0 is detached [ 1036.875238] ubi0: attaching mtd0 [ 1036.901097] ubi0: scanning is finished [ 1036.990947] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.001311] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.008106] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.014710] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1037.021494] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.028166] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:06:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1037.035739] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1037.045342] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.054853] ubi0: background thread "ubi_bgt0d" started, PID 17398 [ 1037.054906] ubi0: detaching mtd0 [ 1037.066358] ubi0: mtd0 is detached [ 1037.070079] ubi0: attaching mtd0 [ 1037.084678] ubi0: scanning is finished [ 1037.154069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1037.179935] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.187329] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.193830] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.204678] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1037.211361] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.221241] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.229445] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1037.243801] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.260977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17413 comm=syz-executor.0 [ 1037.274084] ubi0: background thread "ubi_bgt0d" started, PID 17409 [ 1037.280602] ubi: mtd0 is already attached to ubi0 [ 1037.293588] ubi: mtd0 is already attached to ubi0 [ 1037.304522] ubi: mtd0 is already attached to ubi0 09:06:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:06:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1037.309623] ubi0: detaching mtd0 [ 1037.328702] ubi0: mtd0 is detached 09:06:57 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:57 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:57 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1037.406245] ubi0: attaching mtd0 [ 1037.419631] ubi0: scanning is finished [ 1037.425839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1037.500790] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.510647] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.521180] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.524890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17416 comm=syz-executor.0 [ 1037.530619] ubi0: VID header offset: 64 (aligned 64), data offset: 128 09:06:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1037.551593] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.562555] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.584332] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1037.607659] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.628571] ubi0: background thread "ubi_bgt0d" started, PID 17442 [ 1037.640135] ubi: mtd0 is already attached to ubi0 [ 1037.654229] ubi0: detaching mtd0 09:06:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1037.659332] ubi0: mtd0 is detached [ 1037.663227] ubi0: attaching mtd0 [ 1037.685307] ubi0: scanning is finished 09:06:58 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1037.701903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1037.812594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17465 comm=syz-executor.0 [ 1037.894296] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.909136] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.918036] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.929882] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1037.937910] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:06:58 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1037.948471] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.969913] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1037.986542] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:06:58 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1037.998172] ubi0: background thread "ubi_bgt0d" started, PID 17472 [ 1038.004699] ubi: mtd0 is already attached to ubi0 [ 1038.009710] ubi: mtd0 is already attached to ubi0 [ 1038.016821] ubi: mtd0 is already attached to ubi0 [ 1038.021850] ubi: mtd0 is already attached to ubi0 09:06:58 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:58 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:06:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1038.065991] ubi0: detaching mtd0 [ 1038.079373] ubi0: mtd0 is detached [ 1038.087881] ubi0: attaching mtd0 [ 1038.093125] ubi0: scanning is finished [ 1038.213405] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.225887] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.240380] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1038.253806] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.269936] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.282963] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1038.304895] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:06:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1038.329636] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1038.343460] ubi0: background thread "ubi_bgt0d" started, PID 17502 [ 1038.343474] ubi0: detaching mtd0 [ 1038.365699] ubi0: mtd0 is detached [ 1038.370025] ubi0: attaching mtd0 [ 1038.448121] ubi0: scanning is finished [ 1038.516578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1038.619702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17521 comm=syz-executor.0 [ 1038.644220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.651337] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.661711] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1038.672062] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.697019] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.714908] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:06:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1038.734572] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1038.752685] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:06:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1038.786489] ubi0: background thread "ubi_bgt0d" started, PID 17523 [ 1038.793501] ubi: mtd0 is already attached to ubi0 [ 1038.805923] ubi: mtd0 is already attached to ubi0 [ 1038.810997] ubi0: detaching mtd0 [ 1038.829430] ubi0: mtd0 is detached 09:06:59 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:59 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1038.844421] ubi0: attaching mtd0 [ 1038.894915] ubi0: scanning is finished 09:06:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1039.020254] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1039.047041] ubi0: attaching mtd0 [ 1039.086248] ubi0: scanning is finished [ 1039.244455] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.251695] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.263016] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1039.270774] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1039.282371] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1039.289080] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1039.301349] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1039.311509] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1039.331145] ubi0: background thread "ubi_bgt0d" started, PID 17559 [ 1039.338093] ubi: mtd0 is already attached to ubi0 09:06:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1039.343360] ubi: mtd0 is already attached to ubi0 [ 1039.353794] ubi: mtd0 is already attached to ubi0 [ 1039.359869] ubi0: detaching mtd0 [ 1039.380329] ubi0: mtd0 is detached [ 1039.386900] ubi0: attaching mtd0 09:06:59 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:06:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1039.449363] ubi0: scanning is finished 09:07:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1039.665536] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.673115] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.688758] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1039.700307] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1039.708390] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1039.720796] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1039.729761] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1039.745626] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1039.758522] ubi0: background thread "ubi_bgt0d" started, PID 17585 [ 1039.765702] ubi0: detaching mtd0 [ 1039.775873] ubi0: mtd0 is detached [ 1039.782017] ubi0: attaching mtd0 09:07:00 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1039.832827] ubi0: scanning is finished [ 1039.968261] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.979651] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.986752] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1039.993346] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.005411] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1040.011674] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.021932] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1040.032893] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.048599] ubi0: background thread "ubi_bgt0d" started, PID 17595 [ 1040.056577] ubi: mtd0 is already attached to ubi0 [ 1040.063109] ubi: mtd0 is already attached to ubi0 [ 1040.071700] ubi0: detaching mtd0 [ 1040.082171] ubi0: mtd0 is detached [ 1040.106876] ubi0: attaching mtd0 [ 1040.127414] ubi0: scanning is finished [ 1040.264043] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1040.271092] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1040.278291] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1040.285170] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.291939] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1040.299921] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.307807] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1040.317643] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.328321] ubi0: background thread "ubi_bgt0d" started, PID 17606 [ 1040.328392] ubi0: detaching mtd0 [ 1040.341971] ubi0: mtd0 is detached [ 1040.346352] ubi0: attaching mtd0 [ 1040.388109] ubi0: scanning is finished [ 1040.518289] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1040.528488] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1040.535595] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1040.542102] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.550066] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1040.558471] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.566473] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1040.576338] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.586584] ubi0: background thread "ubi_bgt0d" started, PID 17613 09:07:04 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:07:04 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1043.782459] ubi0: detaching mtd0 [ 1043.790953] ubi0: mtd0 is detached [ 1043.809487] ubi0: attaching mtd0 [ 1043.849146] ubi0: scanning is finished 09:07:04 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1044.055709] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1044.065619] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1044.081615] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1044.090028] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1044.099700] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1044.107590] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1044.117271] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1044.127517] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1044.138230] ubi0: background thread "ubi_bgt0d" started, PID 17649 [ 1044.145513] ubi: mtd0 is already attached to ubi0 [ 1044.150791] ubi: mtd0 is already attached to ubi0 [ 1044.157723] ubi: mtd0 is already attached to ubi0 [ 1044.163014] ubi0: detaching mtd0 [ 1044.177950] ubi0: mtd0 is detached 09:07:04 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:07:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1044.199420] ubi0: attaching mtd0 [ 1044.261405] ubi0: scanning is finished [ 1044.501720] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1044.511756] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1044.522686] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1044.535984] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1044.543111] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1044.556027] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1044.565956] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1044.578977] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1044.591522] ubi0: background thread "ubi_bgt0d" started, PID 17676 [ 1044.601286] ubi0: detaching mtd0 [ 1044.613242] ubi0: mtd0 is detached [ 1044.621088] ubi0: attaching mtd0 [ 1044.626707] ubi0: scanning is finished 09:07:05 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1044.749736] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1044.762125] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1044.781576] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1044.788572] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1044.800826] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1044.808194] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1044.820496] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1044.830917] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1044.846471] ubi0: background thread "ubi_bgt0d" started, PID 17685 [ 1044.846648] ubi0: detaching mtd0 09:07:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1044.875362] ubi0: mtd0 is detached [ 1044.887117] ubi0: attaching mtd0 09:07:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1044.942648] ubi0: scanning is finished 09:07:05 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1045.104488] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1045.119264] ubi0: attaching mtd0 [ 1045.124567] ubi0: scanning is finished [ 1045.209449] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1045.240027] ubi0: attaching mtd0 [ 1045.300521] ubi0: scanning is finished [ 1045.535437] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1045.547676] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1045.559991] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1045.570931] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1045.578252] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1045.588925] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1045.596639] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1045.611235] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1045.620923] ubi0: background thread "ubi_bgt0d" started, PID 17719 [ 1045.632005] ubi: mtd0 is already attached to ubi0 [ 1045.637544] ubi0: detaching mtd0 [ 1045.650644] ubi0: mtd0 is detached [ 1045.667774] ubi0: attaching mtd0 [ 1045.692371] ubi0: scanning is finished [ 1045.783382] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1045.790522] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1045.803893] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1045.810282] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1045.822140] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1045.829431] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1045.841762] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1045.851640] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1045.865648] ubi0: background thread "ubi_bgt0d" started, PID 17727 [ 1045.872142] ubi0: detaching mtd0 [ 1045.882817] ubi0: mtd0 is detached [ 1045.892729] ubi0: attaching mtd0 [ 1045.932723] ubi0: scanning is finished [ 1046.017304] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 09:07:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:07:09 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:09 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:09 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:09 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1049.340077] ubi0: attaching mtd0 [ 1049.344986] ubi0: scanning is finished [ 1049.505754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1049.531831] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1049.545195] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1049.566139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17759 comm=syz-executor.2 [ 1049.578694] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1049.595166] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1049.608460] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1049.616073] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1049.624325] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1049.634093] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1049.643990] ubi0: detaching mtd0 [ 1049.647527] ubi0: background thread "ubi_bgt0d" started, PID 17769 [ 1049.657935] ubi0: mtd0 is detached [ 1049.662608] ubi0: attaching mtd0 09:07:10 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1049.699011] ubi0: scanning is finished [ 1049.898580] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1049.910060] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1049.918520] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1049.931969] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1049.939807] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1049.954726] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1049.967136] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1049.978825] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1049.994646] ubi0: background thread "ubi_bgt0d" started, PID 17781 09:07:10 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 09:07:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:10 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1050.001378] ubi: mtd0 is already attached to ubi0 [ 1050.006585] ubi: mtd0 is already attached to ubi0 [ 1050.011575] ubi: mtd0 is already attached to ubi0 [ 1050.030493] ubi: mtd0 is already attached to ubi0 09:07:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1050.112278] ubi0: detaching mtd0 [ 1050.140223] ubi0: mtd0 is detached [ 1050.146909] ubi0: attaching mtd0 [ 1050.151090] ubi0: scanning is finished [ 1050.281813] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1050.290122] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1050.305439] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1050.310820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1050.318311] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1050.367266] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1050.380079] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1050.395529] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1050.409459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17811 comm=syz-executor.3 [ 1050.441819] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1050.509105] ubi0: background thread "ubi_bgt0d" started, PID 17805 [ 1050.509224] ubi0: detaching mtd0 [ 1050.538563] ubi0: mtd0 is detached [ 1050.569725] ubi0: attaching mtd0 [ 1050.646390] ubi0: scanning is finished [ 1050.831719] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1050.840909] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1050.854802] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1050.861307] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1050.875456] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1050.881894] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1050.899172] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1050.909233] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1050.926828] ubi0: background thread "ubi_bgt0d" started, PID 17822 [ 1050.936832] ubi: mtd0 is already attached to ubi0 [ 1050.941825] ubi: mtd0 is already attached to ubi0 09:07:15 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 1: readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1054.669537] ubi0: detaching mtd0 [ 1054.687603] ubi0: mtd0 is detached [ 1054.694472] ubi0: attaching mtd0 [ 1054.718022] ubi0: scanning is finished [ 1054.764916] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1054.771994] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1054.778813] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1054.785253] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1054.792252] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1054.798570] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1054.806074] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:07:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1054.815592] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1054.824949] ubi0: background thread "ubi_bgt0d" started, PID 17851 [ 1054.831309] ubi0: detaching mtd0 [ 1054.843461] ubi0: mtd0 is detached [ 1054.854949] ubi0: attaching mtd0 [ 1054.870809] ubi0: scanning is finished 09:07:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1054.987834] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1054.999119] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.006728] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.013942] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.020768] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.028983] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1055.036748] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1055.046682] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.056600] ubi0: background thread "ubi_bgt0d" started, PID 17865 [ 1055.056812] ubi: mtd0 is already attached to ubi0 [ 1055.068992] ubi: mtd0 is already attached to ubi0 [ 1055.074560] ubi: mtd0 is already attached to ubi0 [ 1055.079505] ubi: mtd0 is already attached to ubi0 09:07:15 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 1: readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1055.093543] ubi: mtd0 is already attached to ubi0 09:07:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1055.116493] ubi0: detaching mtd0 [ 1055.121385] ubi0: mtd0 is detached [ 1055.131986] ubi0: attaching mtd0 09:07:15 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1055.166345] ubi0: scanning is finished [ 1055.323271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1055.415807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17887 comm=syz-executor.5 [ 1055.461770] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1055.477070] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.499987] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.521406] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.537454] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.551863] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:16 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1055.566709] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1055.587155] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.599390] ubi0: background thread "ubi_bgt0d" started, PID 17902 [ 1055.606523] ubi0: detaching mtd0 [ 1055.626223] ubi0: mtd0 is detached [ 1055.631397] ubi0: attaching mtd0 [ 1055.681895] ubi0: scanning is finished [ 1055.827729] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1055.835032] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.842382] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.849324] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.856792] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.865192] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:16 executing program 1: readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1055.873294] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1055.883334] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.894508] ubi0: background thread "ubi_bgt0d" started, PID 17916 [ 1055.901169] ubi: mtd0 is already attached to ubi0 [ 1055.907523] ubi0: detaching mtd0 [ 1055.924298] ubi0: mtd0 is detached 09:07:16 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1055.927991] ubi0: attaching mtd0 [ 1055.933084] ubi0: scanning is finished 09:07:16 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1056.059540] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1056.088348] ubi0: attaching mtd0 [ 1056.093299] ubi0: scanning is finished [ 1056.185758] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1056.198088] ubi0: attaching mtd0 09:07:16 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1056.249403] ubi0: scanning is finished [ 1056.417386] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1056.425515] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1056.439335] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1056.446281] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1056.458659] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1056.465334] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1056.476924] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1056.486380] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1056.499919] ubi0: background thread "ubi_bgt0d" started, PID 17950 [ 1056.506476] ubi: mtd0 is already attached to ubi0 [ 1056.511597] ubi0: detaching mtd0 09:07:17 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1056.525366] ubi0: mtd0 is detached [ 1056.533023] ubi0: attaching mtd0 09:07:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1056.599594] ubi0: scanning is finished [ 1056.796716] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1056.805459] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1056.816398] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1056.823549] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1056.830527] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:07:17 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1056.844599] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1056.854007] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1056.866064] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1056.876936] ubi0: background thread "ubi_bgt0d" started, PID 17966 [ 1056.883462] ubi: mtd0 is already attached to ubi0 [ 1056.888333] ubi0: detaching mtd0 09:07:17 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1056.914677] ubi0: mtd0 is detached [ 1056.918920] ubi0: attaching mtd0 [ 1056.955151] ubi0: scanning is finished [ 1057.147814] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1057.164037] ubi0: attaching mtd0 [ 1057.197312] ubi0: scanning is finished [ 1057.313196] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1057.320218] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1057.328632] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1057.336354] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1057.344120] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1057.350369] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1057.360695] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1057.371087] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1057.384440] ubi0: background thread "ubi_bgt0d" started, PID 17989 [ 1057.390857] ubi0: detaching mtd0 [ 1057.398338] ubi0: mtd0 is detached [ 1057.413139] ubi0: attaching mtd0 [ 1057.418203] ubi0: scanning is finished [ 1057.468088] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1057.494853] ubi0: attaching mtd0 [ 1057.506838] ubi0: scanning is finished [ 1057.564453] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1057.575114] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1057.582688] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1057.589002] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1057.596091] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1057.603142] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1057.610494] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1057.620086] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1057.629654] ubi0: background thread "ubi_bgt0d" started, PID 18002 [ 1057.636322] ubi: mtd0 is already attached to ubi0 09:07:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:21 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:21 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:21 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:21 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1060.979001] ubi0: detaching mtd0 [ 1060.995907] ubi0: mtd0 is detached [ 1061.002708] ubi0: attaching mtd0 [ 1061.035247] ubi0: scanning is finished [ 1061.101156] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.108377] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.115343] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.122120] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.129113] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.135579] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:21 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1061.143140] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1061.152694] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1061.162337] ubi0: background thread "ubi_bgt0d" started, PID 18031 [ 1061.168723] ubi0: detaching mtd0 [ 1061.177779] ubi0: mtd0 is detached [ 1061.182785] ubi0: attaching mtd0 [ 1061.212679] ubi0: scanning is finished 09:07:21 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1061.311643] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.330406] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.345604] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.353466] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.360182] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.367017] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1061.376796] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1061.386246] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1061.395815] ubi0: background thread "ubi_bgt0d" started, PID 18043 [ 1061.402076] ubi: mtd0 is already attached to ubi0 [ 1061.407142] ubi: mtd0 is already attached to ubi0 09:07:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:22 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1061.413851] ubi: mtd0 is already attached to ubi0 [ 1061.426312] ubi: mtd0 is already attached to ubi0 [ 1061.433111] ubi: mtd0 is already attached to ubi0 09:07:22 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:22 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1061.484072] ubi: mtd0 is already attached to ubi0 09:07:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1061.523515] ubi0: detaching mtd0 [ 1061.555692] ubi0: mtd0 is detached [ 1061.566852] ubi0: attaching mtd0 [ 1061.584929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1061.592489] ubi0: scanning is finished [ 1061.670087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18056 comm=syz-executor.5 [ 1061.713427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:07:22 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1061.797135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18073 comm=syz-executor.3 [ 1061.866520] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.889772] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.906522] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.950458] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.975930] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.984884] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:22 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1061.993307] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1062.003478] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1062.014343] ubi0: background thread "ubi_bgt0d" started, PID 18089 [ 1062.014358] ubi0: detaching mtd0 [ 1062.029327] ubi0: mtd0 is detached [ 1062.047648] ubi0: attaching mtd0 [ 1062.077926] ubi0: scanning is finished [ 1062.224505] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.235409] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1062.244336] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1062.250846] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1062.259746] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1062.268027] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1062.276137] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1062.286994] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1062.297360] ubi0: background thread "ubi_bgt0d" started, PID 18105 [ 1062.304780] ubi: mtd0 is already attached to ubi0 [ 1062.310001] ubi: mtd0 is already attached to ubi0 [ 1062.316728] ubi0: detaching mtd0 09:07:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1062.328292] ubi0: mtd0 is detached [ 1062.338253] ubi0: attaching mtd0 09:07:22 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1062.416577] ubi0: scanning is finished 09:07:23 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1062.595182] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.604537] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1062.622205] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1062.628777] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1062.637384] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1062.645595] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1062.665764] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1062.686811] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:07:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:23 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:23 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1062.696804] ubi0: background thread "ubi_bgt0d" started, PID 18124 [ 1062.704629] ubi: mtd0 is already attached to ubi0 [ 1062.709998] ubi: mtd0 is already attached to ubi0 [ 1062.716827] ubi0: detaching mtd0 [ 1062.726660] ubi0: mtd0 is detached [ 1062.738729] ubi0: attaching mtd0 [ 1062.823258] ubi0: scanning is finished [ 1062.983845] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.992698] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.003136] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.009690] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.017597] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.024725] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1063.033513] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1063.044102] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.054840] ubi: mtd0 is already attached to ubi0 [ 1063.055493] ubi0: background thread "ubi_bgt0d" started, PID 18146 [ 1063.066299] ubi0: detaching mtd0 09:07:23 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:23 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1063.086825] ubi0: mtd0 is detached [ 1063.090682] ubi0: attaching mtd0 [ 1063.119740] ubi0: scanning is finished [ 1063.235619] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1063.243311] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.256800] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.263997] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.276708] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.283230] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1063.290755] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1063.301786] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.311712] ubi0: background thread "ubi_bgt0d" started, PID 18161 [ 1063.318229] ubi0: detaching mtd0 [ 1063.332952] ubi0: mtd0 is detached [ 1063.346648] ubi0: attaching mtd0 [ 1063.350958] ubi0: scanning is finished [ 1063.408721] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1063.420364] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.432131] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.438513] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.446886] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.453582] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1063.460977] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1063.471645] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.482746] ubi0: background thread "ubi_bgt0d" started, PID 18170 [ 1063.482846] ubi: mtd0 is already attached to ubi0 [ 1063.505418] ubi0: detaching mtd0 [ 1063.515002] ubi0: mtd0 is detached [ 1063.526285] ubi0: attaching mtd0 [ 1063.550675] ubi0: scanning is finished [ 1063.710080] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1063.717385] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.726343] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.733435] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.740391] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.748004] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1063.757535] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1063.767814] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.778843] ubi0: background thread "ubi_bgt0d" started, PID 18178 [ 1063.786380] ubi: mtd0 is already attached to ubi0 09:07:27 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:07:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e4"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:27 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1067.308567] ubi0: detaching mtd0 [ 1067.325210] ubi0: mtd0 is detached [ 1067.344858] ubi0: attaching mtd0 [ 1067.354146] ubi0: scanning is finished [ 1067.394396] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1067.402673] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1067.409560] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1067.417342] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1067.424735] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1067.453017] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1067.465002] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1067.478886] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1067.496544] ubi0: background thread "ubi_bgt0d" started, PID 18204 [ 1067.496579] ubi: mtd0 is already attached to ubi0 [ 1067.508604] ubi: mtd0 is already attached to ubi0 [ 1067.517168] ubi: mtd0 is already attached to ubi0 [ 1067.523260] ubi: mtd0 is already attached to ubi0 09:07:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:28 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:07:28 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1067.554747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.626114] ubi0: detaching mtd0 [ 1067.668875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18213 comm=syz-executor.3 [ 1067.688847] ubi0: mtd0 is detached [ 1067.701720] ubi0: attaching mtd0 09:07:28 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1067.784570] ubi0: scanning is finished [ 1068.033042] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.043797] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.064066] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.099722] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.108947] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.119412] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.138069] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1068.148605] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.162452] ubi0: background thread "ubi_bgt0d" started, PID 18253 [ 1068.162482] ubi0: detaching mtd0 09:07:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1068.194714] ubi0: mtd0 is detached [ 1068.238978] ubi0: attaching mtd0 [ 1068.245505] ubi0: scanning is finished [ 1068.309315] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.318985] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.328075] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.337904] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.346797] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.356668] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.366122] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1068.378896] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.390227] ubi0: background thread "ubi_bgt0d" started, PID 18263 [ 1068.400003] ubi: mtd0 is already attached to ubi0 09:07:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:28 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:29 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1068.415136] ubi: mtd0 is already attached to ubi0 [ 1068.429278] ubi0: detaching mtd0 [ 1068.446747] ubi0: mtd0 is detached [ 1068.460003] ubi0: attaching mtd0 [ 1068.486353] ubi0: scanning is finished 09:07:29 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1068.670802] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1068.691907] ubi0: attaching mtd0 [ 1068.696225] ubi0: scanning is finished [ 1068.829467] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.839687] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.851285] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.859308] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.867950] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.874429] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.882085] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1068.891968] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.901794] ubi0: background thread "ubi_bgt0d" started, PID 18295 [ 1068.908384] ubi0: detaching mtd0 [ 1068.926446] ubi0: mtd0 is detached [ 1068.930633] ubi0: attaching mtd0 [ 1068.934827] ubi0: scanning is finished [ 1069.014734] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1069.025342] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1069.037229] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1069.044492] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1069.059690] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1069.066748] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1069.079011] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1069.089963] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1069.104711] ubi0: background thread "ubi_bgt0d" started, PID 18302 [ 1069.111309] ubi: mtd0 is already attached to ubi0 [ 1069.116542] ubi0: detaching mtd0 [ 1069.136268] ubi0: mtd0 is detached [ 1069.155799] ubi0: attaching mtd0 [ 1069.213649] ubi0: scanning is finished [ 1069.433438] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1069.446200] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1069.453041] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1069.459555] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1069.468318] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1069.480210] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1069.488990] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1069.499554] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1069.510654] ubi0: background thread "ubi_bgt0d" started, PID 18313 09:07:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:33 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:33 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:33 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1072.995742] ubi0: detaching mtd0 [ 1073.001667] ubi0: mtd0 is detached [ 1073.005508] ubi0: attaching mtd0 [ 1073.055748] ubi0: scanning is finished [ 1073.159864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1073.254497] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.262956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18337 comm=syz-executor.3 [ 1073.277303] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1073.287760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1073.295223] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1073.302558] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1073.308931] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1073.318492] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1073.328435] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.338426] ubi0: background thread "ubi_bgt0d" started, PID 18347 [ 1073.345311] ubi0: detaching mtd0 09:07:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:33 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1073.365063] ubi0: mtd0 is detached [ 1073.372784] ubi0: attaching mtd0 [ 1073.414008] ubi0: scanning is finished [ 1073.621443] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.628710] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1073.636802] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1073.643642] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1073.651550] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1073.658051] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1073.665760] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1073.676733] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.686562] ubi0: background thread "ubi_bgt0d" started, PID 18362 [ 1073.693344] ubi: mtd0 is already attached to ubi0 [ 1073.698561] ubi: mtd0 is already attached to ubi0 [ 1073.707984] ubi0: detaching mtd0 09:07:34 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1073.723787] ubi0: mtd0 is detached [ 1073.727688] ubi0: attaching mtd0 [ 1073.767109] ubi0: scanning is finished 09:07:34 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:34 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1073.982828] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.989903] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.001409] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.007933] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.016327] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1074.023714] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.032356] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1074.043294] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.054863] ubi0: background thread "ubi_bgt0d" started, PID 18387 [ 1074.062096] ubi0: detaching mtd0 [ 1074.076605] ubi0: mtd0 is detached [ 1074.083908] ubi0: attaching mtd0 [ 1074.090789] ubi0: scanning is finished [ 1074.147160] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1074.157790] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.165476] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.172203] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.178864] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1074.186162] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.194265] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1074.204048] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.213826] ubi0: background thread "ubi_bgt0d" started, PID 18393 [ 1074.220663] ubi0: detaching mtd0 [ 1074.229196] ubi0: mtd0 is detached [ 1074.243332] ubi0: attaching mtd0 [ 1074.247504] ubi0: scanning is finished [ 1074.297669] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1074.304632] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.322324] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.334998] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.346105] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1074.358718] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.366519] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1074.380786] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.393767] ubi0: background thread "ubi_bgt0d" started, PID 18399 [ 1074.401829] ubi: mtd0 is already attached to ubi0 [ 1074.406800] ubi: mtd0 is already attached to ubi0 09:07:38 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.240784] ubi: mtd0 is already attached to ubi0 [ 1078.254196] ubi: mtd0 is already attached to ubi0 09:07:38 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.281243] ubi0: detaching mtd0 [ 1078.311496] ubi0: mtd0 is detached [ 1078.316167] ubi0: attaching mtd0 [ 1078.330048] ubi0: scanning is finished [ 1078.369975] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.377255] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.389405] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.402524] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.409208] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:07:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.415331] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.422977] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1078.432417] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1078.441810] ubi: mtd0 is already attached to ubi0 [ 1078.441850] ubi0: background thread "ubi_bgt0d" started, PID 18434 [ 1078.453255] ubi: mtd0 is already attached to ubi0 09:07:39 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:39 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.471034] ubi: mtd0 is already attached to ubi0 [ 1078.489480] ubi: mtd0 is already attached to ubi0 [ 1078.494459] ubi: mtd0 is already attached to ubi0 09:07:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.523782] ubi: mtd0 is already attached to ubi0 [ 1078.535117] ubi0: detaching mtd0 [ 1078.551387] ubi0: mtd0 is detached [ 1078.578938] ubi0: attaching mtd0 [ 1078.591786] ubi0: scanning is finished [ 1078.721346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1078.760259] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.774455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18462 comm=syz-executor.3 [ 1078.787144] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.798526] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.805918] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.813527] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.820564] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.838347] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1078.854404] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1078.863999] ubi0: background thread "ubi_bgt0d" started, PID 18473 09:07:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:39 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.864029] ubi: mtd0 is already attached to ubi0 [ 1078.876126] ubi: mtd0 is already attached to ubi0 [ 1078.892254] ubi0: detaching mtd0 [ 1078.902492] ubi0: mtd0 is detached 09:07:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:39 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1078.933428] ubi0: attaching mtd0 [ 1078.937775] ubi0: scanning is finished [ 1079.096980] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.108589] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.117727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1079.147294] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.168849] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.177502] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.188378] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.197884] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1079.212390] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1079.224002] ubi0: background thread "ubi_bgt0d" started, PID 18501 [ 1079.231359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18496 comm=syz-executor.3 [ 1079.234033] ubi: mtd0 is already attached to ubi0 09:07:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e65746465767369"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1079.262889] ubi0: detaching mtd0 [ 1079.267731] ubi0: mtd0 is detached [ 1079.284276] ubi0: attaching mtd0 [ 1079.319300] ubi0: scanning is finished [ 1079.485114] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.496024] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.513529] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.520941] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.527803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.539206] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.555337] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1079.565104] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1079.579876] ubi0: background thread "ubi_bgt0d" started, PID 18523 09:07:40 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1079.586358] ubi: mtd0 is already attached to ubi0 [ 1079.595716] ubi0: detaching mtd0 [ 1079.606079] ubi0: mtd0 is detached [ 1079.618492] ubi0: attaching mtd0 [ 1079.673964] ubi0: scanning is finished 09:07:40 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1079.836441] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1079.851585] ubi0: attaching mtd0 [ 1079.866095] ubi0: scanning is finished [ 1079.936641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.943857] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.951553] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.958014] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.966249] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.986251] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.993864] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1080.004270] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.014321] ubi0: background thread "ubi_bgt0d" started, PID 18546 [ 1080.021388] ubi0: detaching mtd0 09:07:40 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1080.036193] ubi0: mtd0 is detached [ 1080.043371] ubi0: attaching mtd0 [ 1080.047806] ubi0: scanning is finished [ 1080.136587] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1080.145290] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1080.168891] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1080.178483] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1080.194104] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1080.200444] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1080.207957] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1080.223529] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.232962] ubi0: background thread "ubi_bgt0d" started, PID 18557 09:07:40 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1080.243584] ubi0: detaching mtd0 [ 1080.249988] ubi0: mtd0 is detached [ 1080.256423] ubi0: attaching mtd0 [ 1080.308483] ubi0: scanning is finished [ 1080.462357] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1080.473203] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1080.480116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1080.486607] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1080.493575] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1080.500417] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1080.507930] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1080.517489] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.527014] ubi0: background thread "ubi_bgt0d" started, PID 18569 [ 1080.533653] ubi: mtd0 is already attached to ubi0 [ 1080.538774] ubi0: detaching mtd0 [ 1080.552348] ubi0: mtd0 is detached [ 1080.561638] ubi0: attaching mtd0 09:07:41 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:41 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1080.625979] ubi0: scanning is finished 09:07:41 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1080.764239] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1080.786244] ubi0: attaching mtd0 [ 1080.791551] ubi0: scanning is finished [ 1080.888580] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1080.895646] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1080.911052] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1080.918629] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1080.930077] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1080.936252] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1080.947137] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1080.957539] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.971522] ubi0: background thread "ubi_bgt0d" started, PID 18592 [ 1080.978370] ubi0: detaching mtd0 [ 1080.984659] ubi0: mtd0 is detached [ 1080.992723] ubi0: attaching mtd0 [ 1081.023096] ubi0: scanning is finished [ 1081.172453] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1081.180401] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1081.187153] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1081.195619] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1081.204345] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1081.211442] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1081.219010] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1081.230647] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1081.241323] ubi0: background thread "ubi_bgt0d" started, PID 18603 [ 1081.247915] ubi: mtd0 is already attached to ubi0 [ 1081.257190] ubi0: detaching mtd0 [ 1081.263538] ubi0: mtd0 is detached [ 1081.267408] ubi0: attaching mtd0 [ 1081.290236] ubi0: scanning is finished [ 1081.429868] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1081.436878] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1081.445443] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1081.452792] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1081.462135] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1081.468414] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1081.477608] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1081.488490] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1081.499001] ubi0: background thread "ubi_bgt0d" started, PID 18611 09:07:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:45 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:45 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:45 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:45 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1084.843980] ubi0: detaching mtd0 [ 1084.857540] ubi0: mtd0 is detached [ 1084.867528] ubi0: attaching mtd0 [ 1084.893307] ubi0: scanning is finished [ 1084.967622] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1084.968667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1084.987037] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1084.998280] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1085.009061] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1085.016119] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1085.026185] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1085.034355] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1085.047466] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:07:45 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1085.055377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18624 comm=syz-executor.3 [ 1085.057522] ubi0: background thread "ubi_bgt0d" started, PID 18642 [ 1085.081323] ubi: mtd0 is already attached to ubi0 [ 1085.086510] ubi0: detaching mtd0 09:07:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1085.114052] ubi0: mtd0 is detached [ 1085.119573] ubi0: attaching mtd0 [ 1085.156450] ubi0: scanning is finished [ 1085.264014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1085.382011] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1085.393409] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1085.394505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18650 comm=syz-executor.5 [ 1085.402610] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 09:07:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1085.427747] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1085.436279] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1085.447124] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1085.455303] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1085.470323] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:07:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:46 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1085.484708] ubi0: background thread "ubi_bgt0d" started, PID 18669 [ 1085.485043] ubi: mtd0 is already attached to ubi0 [ 1085.497400] ubi: mtd0 is already attached to ubi0 [ 1085.506275] ubi0: detaching mtd0 [ 1085.516665] ubi0: mtd0 is detached [ 1085.529461] ubi0: attaching mtd0 09:07:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1085.566758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1085.571670] ubi0: scanning is finished [ 1085.741155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18677 comm=syz-executor.5 [ 1085.756692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1085.860496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18698 comm=syz-executor.2 [ 1085.882056] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1085.893731] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1085.905473] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1085.914785] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1085.937983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1085.962660] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1085.985855] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1086.000574] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:07:46 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1086.010211] ubi0: background thread "ubi_bgt0d" started, PID 18700 [ 1086.016646] ubi: mtd0 is already attached to ubi0 [ 1086.026267] ubi0: detaching mtd0 [ 1086.035421] ubi0: mtd0 is detached [ 1086.041419] ubi0: attaching mtd0 09:07:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1086.080678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1086.083575] ubi0: scanning is finished 09:07:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1086.158337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18706 comm=syz-executor.5 [ 1086.242147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1086.316907] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1086.334224] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1086.357432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18732 comm=syz-executor.2 [ 1086.359204] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1086.385012] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1086.398257] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1086.409758] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1086.417522] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1086.433265] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1086.442801] ubi0: background thread "ubi_bgt0d" started, PID 18730 [ 1086.454591] ubi: mtd0 is already attached to ubi0 09:07:47 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:47 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1086.471359] ubi0: detaching mtd0 [ 1086.487507] ubi0: mtd0 is detached [ 1086.489807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1086.501405] ubi0: attaching mtd0 [ 1086.541105] ubi0: scanning is finished 09:07:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1086.687725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1086.706279] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1086.726682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18734 comm=syz-executor.5 [ 1086.731845] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1086.745661] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1086.752758] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1086.759716] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1086.765835] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1086.778185] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:07:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1086.796168] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1086.820615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18761 comm=syz-executor.2 09:07:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1086.842401] ubi0: background thread "ubi_bgt0d" started, PID 18757 [ 1086.850141] ubi: mtd0 is already attached to ubi0 [ 1086.855404] ubi0: detaching mtd0 [ 1086.871379] ubi0: mtd0 is detached 09:07:47 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1086.912177] ubi0: attaching mtd0 09:07:47 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1087.044809] ubi0: scanning is finished [ 1087.050034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1087.107629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18788 comm=syz-executor.5 09:07:47 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1087.199412] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1087.213825] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1087.237336] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 09:07:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1087.254508] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1087.278158] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1087.292515] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1087.310065] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1087.327815] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1087.341836] ubi0: background thread "ubi_bgt0d" started, PID 18794 [ 1087.351311] ubi: mtd0 is already attached to ubi0 [ 1087.356275] ubi0: detaching mtd0 09:07:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1087.359138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1087.383912] ubi0: mtd0 is detached [ 1087.387793] ubi0: attaching mtd0 09:07:47 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:47 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1087.430152] ubi0: scanning is finished [ 1087.541764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18800 comm=syz-executor.5 09:07:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1087.626388] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1087.633762] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1087.642231] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1087.652379] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1087.660133] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1087.666907] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1087.674625] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1087.684350] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1087.693957] ubi0: background thread "ubi_bgt0d" started, PID 18826 [ 1087.700615] ubi0: detaching mtd0 [ 1087.705989] ubi0: mtd0 is detached [ 1087.715871] ubi0: attaching mtd0 09:07:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1087.748265] ubi0: scanning is finished [ 1087.903886] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1087.911686] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1087.923396] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1087.930719] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1087.938244] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1087.944898] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:48 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1087.954783] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1087.967903] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1087.993095] ubi0: background thread "ubi_bgt0d" started, PID 18841 [ 1087.993128] ubi: mtd0 is already attached to ubi0 [ 1088.010693] ubi0: detaching mtd0 09:07:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:48 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1088.045061] ubi0: mtd0 is detached [ 1088.056950] ubi0: attaching mtd0 [ 1088.113986] ubi0: scanning is finished 09:07:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:48 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1088.324401] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1088.363029] ubi0: attaching mtd0 [ 1088.396856] ubi0: scanning is finished 09:07:48 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1088.569574] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1088.576699] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1088.589892] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1088.604698] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1088.625642] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1088.642997] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1088.656578] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1088.669075] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1088.678922] ubi0: background thread "ubi_bgt0d" started, PID 18897 [ 1088.685622] ubi: mtd0 is already attached to ubi0 [ 1088.693529] ubi: mtd0 is already attached to ubi0 [ 1088.706042] ubi0: detaching mtd0 [ 1088.722052] ubi0: mtd0 is detached 09:07:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1088.726275] ubi0: attaching mtd0 09:07:49 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1088.780521] ubi0: scanning is finished 09:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1089.042011] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1089.052335] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1089.062138] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1089.083456] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1089.093429] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1089.111944] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1089.124375] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:07:49 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1089.136906] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1089.151435] ubi0: background thread "ubi_bgt0d" started, PID 18932 [ 1089.157924] ubi: mtd0 is already attached to ubi0 [ 1089.163451] ubi0: detaching mtd0 [ 1089.181235] ubi0: mtd0 is detached 09:07:49 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1089.199241] ubi0: attaching mtd0 [ 1089.203579] ubi0: scanning is finished 09:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1089.384841] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1089.409491] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1089.416382] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1089.427547] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1089.435456] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1089.446173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1089.454289] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1089.464153] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1089.473947] ubi0: background thread "ubi_bgt0d" started, PID 18960 [ 1089.480809] ubi: mtd0 is already attached to ubi0 09:07:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) socket$inet(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:07:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1089.488492] ubi0: detaching mtd0 [ 1089.503396] ubi0: mtd0 is detached [ 1089.508891] ubi0: attaching mtd0 [ 1089.547232] ubi0: scanning is finished [ 1089.703450] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1089.717856] ubi0: attaching mtd0 09:07:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1089.753102] ubi0: scanning is finished 09:07:50 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1089.895420] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1089.907978] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1089.921691] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1089.929811] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1089.936511] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1089.944022] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1089.951659] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1089.963668] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1089.973058] ubi0: background thread "ubi_bgt0d" started, PID 19001 [ 1089.979713] ubi: mtd0 is already attached to ubi0 [ 1089.984747] ubi: mtd0 is already attached to ubi0 [ 1089.989810] ubi0: detaching mtd0 09:07:50 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:50 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1090.002670] ubi0: mtd0 is detached 09:07:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e4"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1090.028954] ubi0: attaching mtd0 [ 1090.070111] ubi0: scanning is finished [ 1090.172391] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1090.180168] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1090.186699] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1090.194106] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1090.201732] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1090.207819] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1090.215984] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1090.226152] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1090.236034] ubi0: background thread "ubi_bgt0d" started, PID 19022 [ 1090.236115] ubi0: detaching mtd0 [ 1090.259937] ubi0: mtd0 is detached 09:07:50 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) [ 1090.271261] ubi0: attaching mtd0 [ 1090.308830] ubi0: scanning is finished [ 1090.405461] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1090.415098] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1090.422590] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1090.432583] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1090.440353] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1090.446476] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1090.457200] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1090.467220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1090.480408] ubi0: background thread "ubi_bgt0d" started, PID 19038 [ 1090.486894] ubi: mtd0 is already attached to ubi0 [ 1090.496327] ubi0: detaching mtd0 09:07:51 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1090.510514] ubi0: mtd0 is detached [ 1090.518054] ubi0: attaching mtd0 [ 1090.523575] ubi0: scanning is finished [ 1090.607352] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1090.615964] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1090.622705] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1090.629358] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1090.636077] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1090.642559] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1090.650347] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1090.659927] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1090.670066] ubi0: background thread "ubi_bgt0d" started, PID 19053 [ 1090.676470] ubi: mtd0 is already attached to ubi0 [ 1090.684218] ubi0: detaching mtd0 [ 1090.702720] ubi0: mtd0 is detached 09:07:51 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1090.713374] ubi0: attaching mtd0 [ 1090.754895] ubi0: scanning is finished [ 1090.845691] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1090.852716] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1090.860545] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1090.866811] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1090.874614] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1090.881398] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:51 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1090.889202] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1090.899292] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1090.909446] ubi0: background thread "ubi_bgt0d" started, PID 19069 [ 1090.909595] ubi: mtd0 is already attached to ubi0 [ 1090.922704] ubi0: detaching mtd0 [ 1090.928815] ubi0: mtd0 is detached [ 1090.938458] ubi0: attaching mtd0 09:07:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) [ 1090.967800] ubi0: scanning is finished [ 1091.065653] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1091.077734] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1091.085077] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1091.093619] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1091.100588] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1091.106686] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1091.114636] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1091.124721] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1091.134665] ubi0: background thread "ubi_bgt0d" started, PID 19084 [ 1091.134897] ubi: mtd0 is already attached to ubi0 [ 1091.148412] ubi: mtd0 is already attached to ubi0 [ 1091.153394] ubi0: detaching mtd0 [ 1091.161426] ubi0: mtd0 is detached 09:07:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:51 executing program 0: readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1091.171837] ubi0: attaching mtd0 09:07:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1091.230381] ubi0: scanning is finished [ 1091.336238] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1091.344236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1091.353655] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1091.360960] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1091.367658] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1091.374825] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1091.383054] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1091.393128] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1091.403359] ubi0: background thread "ubi_bgt0d" started, PID 19105 [ 1091.403546] ubi0: detaching mtd0 [ 1091.423405] ubi0: mtd0 is detached [ 1091.427903] ubi0: attaching mtd0 [ 1091.467127] ubi0: scanning is finished [ 1091.576978] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1091.588570] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1091.595334] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1091.603025] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1091.612448] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1091.622756] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1091.630766] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1091.640732] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1091.659480] ubi0: background thread "ubi_bgt0d" started, PID 19117 [ 1091.665988] ubi: mtd0 is already attached to ubi0 [ 1091.672090] ubi: mtd0 is already attached to ubi0 09:07:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 09:07:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) [ 1091.686643] ubi: mtd0 is already attached to ubi0 [ 1091.694936] ubi0: detaching mtd0 [ 1091.716451] ubi0: mtd0 is detached 09:07:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1091.742841] ubi0: attaching mtd0 09:07:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1091.819599] ubi0: scanning is finished [ 1091.843750] nla_parse: 5 callbacks suppressed [ 1091.843756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1091.919134] selinux_nlmsg_perm: 7 callbacks suppressed [ 1091.919143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19131 comm=syz-executor.2 09:07:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:07:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1092.064322] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1092.084397] ubi0: attaching mtd0 [ 1092.154753] ubi0: scanning is finished [ 1092.273017] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1092.280337] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1092.287175] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1092.294222] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1092.301745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1092.308503] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) 09:07:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1092.316171] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1092.326418] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1092.336430] ubi0: background thread "ubi_bgt0d" started, PID 19170 [ 1092.343411] ubi: mtd0 is already attached to ubi0 [ 1092.350451] ubi0: detaching mtd0 [ 1092.359302] ubi0: mtd0 is detached [ 1092.365624] ubi0: attaching mtd0 09:07:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1092.403786] ubi0: scanning is finished [ 1092.557757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19184 comm=syz-executor.2 09:07:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1092.624993] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1092.640735] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1092.664992] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1092.678264] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1092.702828] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1092.714774] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1092.722694] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1092.732589] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1092.742855] ubi0: background thread "ubi_bgt0d" started, PID 19196 [ 1092.749816] ubi0: detaching mtd0 [ 1092.769070] ubi0: mtd0 is detached [ 1092.787361] ubi0: attaching mtd0 [ 1092.818665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1092.833025] ubi0: scanning is finished 09:07:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="34c4530dce6c59e307a973af5eaa4bb1f148bb21dc5a815ed0fd27ccd666848c91df8f49272de7c5b06bafe91d8361bb0cabd815ec9292bee0210300c67cef2378ba12a8a0ee8eb3fc575ab92c2f5c75805fe288c3e9ee73a1fe93cb3fef4e5b88f1ab633d414aad50278777c336390f12681d21aea1cc3ff9406737144d7e81492ce612f84c73b7504cecefe2162d4fa1914f61d10fd62b22446f7faf5f32884cdcaf45555437617458c012c00ffb267d4194505e75f6d72fcbc5165f8548ded3efabba556aa9e6dbf929c7a06fd6f7aeaf697bfefa409c6c729aab0dc93119cc8c5fe0863fd628b47fdb9bcf04e8d4474e7f89a8cc4bf009474887b0f52b66788cd805c2df2e000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1092.903222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19199 comm=syz-executor.2 [ 1092.929507] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1092.962764] ubi0: attaching mtd0 09:07:53 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1092.985864] ubi0: scanning is finished 09:07:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1093.169941] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1093.176852] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1093.192167] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1093.202372] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1093.227346] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1093.245976] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1093.266554] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 09:07:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1093.283881] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1093.293484] ubi0: background thread "ubi_bgt0d" started, PID 19231 [ 1093.304059] ubi: mtd0 is already attached to ubi0 09:07:53 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1093.342526] ubi0: detaching mtd0 [ 1093.352383] ubi0: mtd0 is detached [ 1093.366624] ubi0: attaching mtd0 [ 1093.373163] ubi0: scanning is finished 09:07:54 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1093.465712] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1093.496803] ubi0: attaching mtd0 [ 1093.543476] ubi0: scanning is finished [ 1093.594736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:54 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1093.647251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19258 comm=syz-executor.2 [ 1093.662920] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1093.685050] ubi0: attaching mtd0 09:07:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1093.743624] ubi0: scanning is finished [ 1093.938889] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1093.956629] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1093.973927] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1093.980561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1093.980646] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1093.997097] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1094.003703] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1094.011962] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1094.022576] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1094.032685] ubi0: background thread "ubi_bgt0d" started, PID 19291 09:07:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1094.032923] ubi: mtd0 is already attached to ubi0 [ 1094.055778] ubi0: detaching mtd0 [ 1094.061494] ubi0: mtd0 is detached [ 1094.069326] ubi0: attaching mtd0 09:07:54 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1094.093972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19284 comm=syz-executor.2 [ 1094.097288] ubi0: scanning is finished 09:07:54 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1094.246825] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1094.254055] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1094.261494] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1094.270184] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1094.277120] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1094.284651] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1094.292460] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1094.302139] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1094.311831] ubi0: detaching mtd0 [ 1094.312450] ubi0: background thread "ubi_bgt0d" started, PID 19310 [ 1094.329825] ubi0: mtd0 is detached [ 1094.334105] ubi0: attaching mtd0 09:07:54 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 1094.363589] ubi0: scanning is finished [ 1094.539435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1094.548150] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1094.555005] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1094.568171] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1094.574606] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1094.582165] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 09:07:55 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1094.589102] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1094.596664] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1094.607085] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1094.617075] ubi0: background thread "ubi_bgt0d" started, PID 19327 [ 1094.623552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19320 comm=syz-executor.3 09:07:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1094.646466] ubi: mtd0 is already attached to ubi0 [ 1094.651683] ubi0: detaching mtd0 [ 1094.672907] ubi0: mtd0 is detached [ 1094.681708] ubi0: attaching mtd0 [ 1094.686070] ubi0: scanning is finished [ 1094.746411] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1094.753529] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1094.762572] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1094.769599] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1094.776408] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1094.783485] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:55 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:07:55 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1094.791273] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1094.801014] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1094.810788] ubi0: background thread "ubi_bgt0d" started, PID 19344 [ 1094.817294] ubi: mtd0 is already attached to ubi0 [ 1094.823097] ubi0: detaching mtd0 [ 1094.839088] ubi0: mtd0 is detached [ 1094.843247] ubi0: attaching mtd0 [ 1094.896364] ubi0: scanning is finished [ 1095.007043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') [ 1095.112924] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1095.116611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19355 comm=syz-executor.2 [ 1095.130589] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1095.139422] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1095.145795] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1095.155033] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1095.174075] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1095.190920] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1095.210905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 09:07:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1095.226579] ubi0: background thread "ubi_bgt0d" started, PID 19374 [ 1095.234465] ubi: mtd0 is already attached to ubi0 [ 1095.248944] ubi0: detaching mtd0 [ 1095.255383] ubi0: mtd0 is detached [ 1095.269424] ubi0: attaching mtd0 [ 1095.309756] ubi0: scanning is finished 09:07:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') 09:07:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {0xffffffffffffffff, 0x9485}, {}, {0xffffffffffffffff, 0x12a6}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @multicast1}, &(0x7f0000000040)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280400001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x40, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x2adc) [ 1095.489593] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1095.499131] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1095.505886] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1095.524030] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1095.533207] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1095.543567] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1095.561418] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1095.584004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 09:07:56 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) [ 1095.588101] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1095.613160] ubi0: background thread "ubi_bgt0d" started, PID 19397 [ 1095.627406] ubi0: detaching mtd0 [ 1095.634640] ubi0: mtd0 is detached 09:07:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1095.641266] ubi0: attaching mtd0 [ 1095.674560] ubi0: scanning is finished [ 1095.683393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19408 comm=syz-executor.2 09:07:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:56 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1095.810773] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1095.833882] ubi0: attaching mtd0 [ 1095.839092] ubi0: scanning is finished 09:07:56 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1095.917347] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1095.933871] ubi0: attaching mtd0 [ 1095.939702] ubi0: scanning is finished [ 1096.005650] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1096.013621] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1096.021215] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1096.029134] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1096.036912] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1096.043368] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:56 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) 09:07:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1096.051667] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1096.061362] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1096.071111] ubi0: background thread "ubi_bgt0d" started, PID 19447 [ 1096.079982] ubi0: detaching mtd0 [ 1096.085259] ubi0: mtd0 is detached [ 1096.090532] ubi0: attaching mtd0 [ 1096.141415] ubi0: scanning is finished [ 1096.236127] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1096.243509] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1096.251202] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1096.258053] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1096.264879] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1096.272253] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1096.279910] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1096.289360] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1096.298870] ubi0: detaching mtd0 [ 1096.299792] ubi0: background thread "ubi_bgt0d" started, PID 19465 [ 1096.314315] ubi0: mtd0 is detached [ 1096.318822] ubi0: attaching mtd0 [ 1096.339870] ubi0: scanning is finished [ 1096.424928] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1096.434354] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1096.442585] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1096.451133] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1096.459271] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1096.465351] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="00042cbd7000fedbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008d31c47c03000300000006000400000000000e0001006e657464657673696d0000000f0002000c4f7464657673696d30000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400ec5a1a75fc6fa97a21043f93b6455a02edf16c5b7490b2897176e1caf5751d66d3f0cb84c190565467a05d06ac675bf95fd921494d25d9d1e88a5c55a10de8380a011048632c138e5713fb3c5985f33114fa250846cce20af36613d813051d970b346491d68654fdf1a1a94cbf3cbef48d919196b9f1cd41cca5155c8ab5e42e0db56d0f487ff7e419"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) 09:07:57 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/232, 0xe8}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x994) socket$nl_route(0x10, 0x3, 0x0) [ 1096.476454] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1096.487063] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1096.497648] ubi0: background thread "ubi_bgt0d" started, PID 19476 [ 1096.504277] ubi: mtd0 is already attached to ubi0 [ 1096.514993] ubi0: detaching mtd0 [ 1096.544455] ubi0: mtd0 is detached [ 1096.552252] ubi0: attaching mtd0 [ 1096.574747] ubi0: scanning is finished [ 1096.657747] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1096.665016] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1096.675187] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1096.682041] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1096.689278] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1096.695470] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 09:07:57 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000b80)={{}, 0x8}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x0, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="d0000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1096.704065] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2132452994 [ 1096.713916] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1096.723914] ubi0: background thread "ubi_bgt0d" started, PID 19492 [ 1096.724102] ubi0: detaching mtd0 [ 1288.009777] INFO: task syz-executor.3:19454 blocked for more than 140 seconds. [ 1288.017197] Not tainted 4.14.183-syzkaller #0 [ 1288.022519] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.030586] syz-executor.3 D30080 19454 6364 0x00000004 [ 1288.036221] Call Trace: [ 1288.038801] __schedule+0x8a6/0x1d70 [ 1288.042570] ? firmware_map_remove+0x18f/0x18f [ 1288.047162] ? trace_hardirqs_on+0x10/0x10 [ 1288.051440] schedule+0x8d/0x1b0 [ 1288.054796] schedule_timeout+0x86c/0xe50 [ 1288.058922] ? vprintk_emit+0x3db/0x600 [ 1288.062942] ? usleep_range+0x130/0x130 [ 1288.066905] ? wait_for_common+0x26a/0x430 [ 1288.071183] ? mark_held_locks+0xa6/0xf0 [ 1288.075232] ? _raw_spin_unlock_irq+0x24/0x90 [ 1288.079774] wait_for_common+0x272/0x430 [ 1288.083820] ? try_to_wake_up+0x7ee/0x1110 [ 1288.088031] ? out_of_line_wait_on_atomic_t+0x1a0/0x1a0 [ 1288.093459] ? wake_up_q+0xe0/0xe0 [ 1288.097008] kthread_stop+0xce/0x640 [ 1288.101328] ubi_detach_mtd_dev+0x1e3/0x3cc [ 1288.105650] ctrl_cdev_ioctl+0x14b/0x220 [ 1288.109777] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.114348] ? selinux_file_ioctl+0x3f7/0x560 [ 1288.118817] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.123435] do_vfs_ioctl+0x75a/0xfe0 [ 1288.127228] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.132902] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.137302] ? security_file_ioctl+0x76/0xb0 [ 1288.141765] ? security_file_ioctl+0x83/0xb0 [ 1288.146181] SyS_ioctl+0x7f/0xb0 [ 1288.149589] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.153554] do_syscall_64+0x1d5/0x640 [ 1288.157419] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.162652] RIP: 0033:0x45ca69 [ 1288.165829] RSP: 002b:00007f59dce54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.173638] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1288.180970] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 1288.188225] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1288.195545] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.202854] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007f59dce556d4 [ 1288.210204] INFO: task syz-executor.3:19461 blocked for more than 140 seconds. [ 1288.217564] Not tainted 4.14.183-syzkaller #0 [ 1288.222612] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.230929] syz-executor.3 D29168 19461 6364 0x00000004 [ 1288.236536] Call Trace: [ 1288.239102] __schedule+0x8a6/0x1d70 [ 1288.242868] ? firmware_map_remove+0x18f/0x18f [ 1288.247440] ? lock_downgrade+0x6e0/0x6e0 [ 1288.251647] schedule+0x8d/0x1b0 [ 1288.255020] schedule_preempt_disabled+0xf/0x20 [ 1288.259719] __mutex_lock+0x5f0/0x1430 [ 1288.263600] ? lock_downgrade+0x6e0/0x6e0 [ 1288.267729] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.273217] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.277441] ? __mutex_unlock_slowpath+0x75/0x780 [ 1288.282324] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.288371] ? __get_mtd_device+0x130/0x130 [ 1288.292745] ? __might_fault+0x177/0x1b0 [ 1288.296797] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.301056] ctrl_cdev_ioctl+0x190/0x220 [ 1288.305131] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.309762] ? selinux_file_ioctl+0x3f7/0x560 [ 1288.314242] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.318801] do_vfs_ioctl+0x75a/0xfe0 [ 1288.322648] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.328274] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.332737] ? security_file_ioctl+0x76/0xb0 [ 1288.337132] ? security_file_ioctl+0x83/0xb0 [ 1288.341579] SyS_ioctl+0x7f/0xb0 [ 1288.344930] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.348878] do_syscall_64+0x1d5/0x640 [ 1288.352804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.357974] RIP: 0033:0x45ca69 [ 1288.364546] RSP: 002b:00007f59dce33c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.372306] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1288.379616] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000005 [ 1288.386889] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.394185] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.401505] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007f59dce346d4 [ 1288.408778] INFO: task syz-executor.4:19458 blocked for more than 140 seconds. [ 1288.416360] Not tainted 4.14.183-syzkaller #0 [ 1288.421409] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.429361] syz-executor.4 D29088 19458 6366 0x00000004 [ 1288.435058] Call Trace: [ 1288.437634] __schedule+0x8a6/0x1d70 [ 1288.441467] ? firmware_map_remove+0x18f/0x18f [ 1288.446042] ? lock_downgrade+0x6e0/0x6e0 [ 1288.450240] schedule+0x8d/0x1b0 [ 1288.453602] schedule_preempt_disabled+0xf/0x20 [ 1288.459030] __mutex_lock+0x5f0/0x1430 [ 1288.462989] ? lock_downgrade+0x6e0/0x6e0 [ 1288.467125] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.471398] ? __mutex_unlock_slowpath+0x75/0x780 [ 1288.476226] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.481723] ? __get_mtd_device+0x130/0x130 [ 1288.486036] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.490983] ctrl_cdev_ioctl+0x190/0x220 [ 1288.495034] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.499654] ? do_vfs_ioctl+0x6fb/0xfe0 [ 1288.503619] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.508178] do_vfs_ioctl+0x75a/0xfe0 [ 1288.512023] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.517639] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.522086] ? security_file_ioctl+0x76/0xb0 [ 1288.526482] ? security_file_ioctl+0x83/0xb0 [ 1288.530938] SyS_ioctl+0x7f/0xb0 [ 1288.534291] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.538239] do_syscall_64+0x1d5/0x640 [ 1288.542160] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.547336] RIP: 0033:0x45ca69 [ 1288.550568] RSP: 002b:00007f401a130c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.558263] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1288.565553] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000004 [ 1288.572885] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1288.580200] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.587580] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007f401a1316d4 [ 1288.594920] INFO: task syz-executor.5:19470 blocked for more than 140 seconds. [ 1288.602334] Not tainted 4.14.183-syzkaller #0 [ 1288.607332] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.615328] syz-executor.5 D30080 19470 6365 0x00000004 [ 1288.621317] Call Trace: [ 1288.623893] __schedule+0x8a6/0x1d70 [ 1288.627601] ? firmware_map_remove+0x18f/0x18f [ 1288.632230] ? lock_downgrade+0x6e0/0x6e0 [ 1288.636368] schedule+0x8d/0x1b0 [ 1288.639773] schedule_preempt_disabled+0xf/0x20 [ 1288.644430] __mutex_lock+0x5f0/0x1430 [ 1288.648293] ? ctrl_cdev_ioctl+0x142/0x220 [ 1288.652571] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.658011] ? __might_fault+0x104/0x1b0 [ 1288.662130] ? lock_acquire+0x170/0x3f0 [ 1288.666097] ? ctrl_cdev_ioctl+0x142/0x220 [ 1288.670374] ctrl_cdev_ioctl+0x142/0x220 [ 1288.674437] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.679004] ? selinux_file_ioctl+0x3f7/0x560 [ 1288.683520] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.688111] do_vfs_ioctl+0x75a/0xfe0 [ 1288.691961] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.697575] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.702031] ? security_file_ioctl+0x76/0xb0 [ 1288.706423] ? security_file_ioctl+0x83/0xb0 [ 1288.710864] SyS_ioctl+0x7f/0xb0 [ 1288.714244] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.718197] do_syscall_64+0x1d5/0x640 [ 1288.722143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.727334] RIP: 0033:0x45ca69 [ 1288.730636] RSP: 002b:00007f3b9713dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.738335] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1288.745652] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 1288.753293] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1288.760598] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.767856] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007f3b9713e6d4 [ 1288.775184] INFO: task syz-executor.5:19474 blocked for more than 140 seconds. [ 1288.782611] Not tainted 4.14.183-syzkaller #0 [ 1288.787602] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.795602] syz-executor.5 D29136 19474 6365 0x00000004 [ 1288.801275] Call Trace: [ 1288.803872] __schedule+0x8a6/0x1d70 [ 1288.807608] ? firmware_map_remove+0x18f/0x18f [ 1288.812233] ? lock_downgrade+0x6e0/0x6e0 [ 1288.816371] schedule+0x8d/0x1b0 [ 1288.819775] schedule_preempt_disabled+0xf/0x20 [ 1288.824471] __mutex_lock+0x5f0/0x1430 [ 1288.828352] ? lock_downgrade+0x6e0/0x6e0 [ 1288.832550] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.838048] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.842320] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.847773] ? __get_mtd_device+0x130/0x130 [ 1288.852149] ? __might_fault+0x177/0x1b0 [ 1288.856213] ? ctrl_cdev_ioctl+0x190/0x220 [ 1288.860487] ctrl_cdev_ioctl+0x190/0x220 [ 1288.864535] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.869140] ? do_vfs_ioctl+0x76/0xfe0 [ 1288.873067] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1288.877640] do_vfs_ioctl+0x75a/0xfe0 [ 1288.882055] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1288.887677] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.892272] ? security_file_ioctl+0x76/0xb0 [ 1288.896678] ? security_file_ioctl+0x83/0xb0 [ 1288.901133] SyS_ioctl+0x7f/0xb0 [ 1288.904487] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1288.908488] do_syscall_64+0x1d5/0x640 [ 1288.912414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.917589] RIP: 0033:0x45ca69 [ 1288.920808] RSP: 002b:00007f3b9711cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.928505] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1288.935860] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000005 [ 1288.943165] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.950490] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1288.957747] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007f3b9711d6d4 [ 1288.965092] INFO: task syz-executor.1:19480 blocked for more than 140 seconds. [ 1288.972781] Not tainted 4.14.183-syzkaller #0 [ 1288.977776] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.985766] syz-executor.1 D29984 19480 6367 0x00000004 [ 1288.991486] Call Trace: [ 1288.994055] __schedule+0x8a6/0x1d70 [ 1288.997747] ? firmware_map_remove+0x18f/0x18f [ 1289.002351] ? lock_downgrade+0x6e0/0x6e0 [ 1289.006494] schedule+0x8d/0x1b0 [ 1289.010428] schedule_preempt_disabled+0xf/0x20 [ 1289.015098] __mutex_lock+0x5f0/0x1430 [ 1289.018963] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.023230] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.028673] ? __might_fault+0x104/0x1b0 [ 1289.032771] ? lock_acquire+0x170/0x3f0 [ 1289.036740] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.041011] ctrl_cdev_ioctl+0x142/0x220 [ 1289.045061] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.049719] ? selinux_file_ioctl+0x3f7/0x560 [ 1289.054207] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.058767] do_vfs_ioctl+0x75a/0xfe0 [ 1289.062601] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1289.068218] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.072674] ? security_file_ioctl+0x76/0xb0 [ 1289.077091] ? security_file_ioctl+0x83/0xb0 [ 1289.081536] SyS_ioctl+0x7f/0xb0 [ 1289.084890] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1289.088844] do_syscall_64+0x1d5/0x640 [ 1289.092800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.097976] RIP: 0033:0x45ca69 [ 1289.101190] RSP: 002b:00007fcde4db6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.108886] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1289.116188] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 1289.123511] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1289.130976] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1289.138251] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007fcde4db76d4 [ 1289.146071] INFO: task syz-executor.1:19486 blocked for more than 140 seconds. [ 1289.153512] Not tainted 4.14.183-syzkaller #0 [ 1289.158508] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.166495] syz-executor.1 D28448 19486 6367 0x00000004 [ 1289.172195] Call Trace: [ 1289.174794] __schedule+0x8a6/0x1d70 [ 1289.178485] ? firmware_map_remove+0x18f/0x18f [ 1289.183102] ? lock_downgrade+0x6e0/0x6e0 [ 1289.187266] schedule+0x8d/0x1b0 [ 1289.190675] schedule_preempt_disabled+0xf/0x20 [ 1289.195330] __mutex_lock+0x5f0/0x1430 [ 1289.199198] ? lock_downgrade+0x6e0/0x6e0 [ 1289.203371] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.208810] ? ctrl_cdev_ioctl+0x190/0x220 [ 1289.213156] ? __mutex_unlock_slowpath+0x75/0x780 [ 1289.218012] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.223533] ? __get_mtd_device+0x130/0x130 [ 1289.227843] ? __might_fault+0x177/0x1b0 [ 1289.231941] ? ctrl_cdev_ioctl+0x190/0x220 [ 1289.236251] ctrl_cdev_ioctl+0x190/0x220 [ 1289.240352] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.244922] ? do_vfs_ioctl+0x6fb/0xfe0 [ 1289.248871] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.253500] do_vfs_ioctl+0x75a/0xfe0 [ 1289.257290] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1289.262946] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.267349] ? security_file_ioctl+0x76/0xb0 [ 1289.272329] ? security_file_ioctl+0x83/0xb0 [ 1289.276734] SyS_ioctl+0x7f/0xb0 [ 1289.280128] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1289.284114] do_syscall_64+0x1d5/0x640 [ 1289.287979] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.293231] RIP: 0033:0x45ca69 [ 1289.296435] RSP: 002b:00007fcde4d95c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.304166] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1289.311512] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000005 [ 1289.318768] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.326059] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1289.333386] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007fcde4d966d4 [ 1289.340715] INFO: task syz-executor.2:19484 blocked for more than 140 seconds. [ 1289.348060] Not tainted 4.14.183-syzkaller #0 [ 1289.353133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.361153] syz-executor.2 D29424 19484 6368 0x00000004 [ 1289.366767] Call Trace: [ 1289.369395] __schedule+0x8a6/0x1d70 [ 1289.373121] ? firmware_map_remove+0x18f/0x18f [ 1289.377689] ? lock_downgrade+0x6e0/0x6e0 [ 1289.381864] schedule+0x8d/0x1b0 [ 1289.385247] schedule_preempt_disabled+0xf/0x20 [ 1289.389956] __mutex_lock+0x5f0/0x1430 [ 1289.393832] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.398043] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.404054] ? __might_fault+0x104/0x1b0 [ 1289.408111] ? lock_acquire+0x170/0x3f0 [ 1289.412130] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.416368] ctrl_cdev_ioctl+0x142/0x220 [ 1289.420501] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.425075] ? selinux_file_ioctl+0x3f7/0x560 [ 1289.429603] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.434205] do_vfs_ioctl+0x75a/0xfe0 [ 1289.437984] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1289.443665] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.448067] ? security_file_ioctl+0x76/0xb0 [ 1289.452514] ? security_file_ioctl+0x83/0xb0 [ 1289.456908] SyS_ioctl+0x7f/0xb0 [ 1289.460333] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1289.464298] do_syscall_64+0x1d5/0x640 [ 1289.468163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.473383] RIP: 0033:0x45ca69 [ 1289.476565] RSP: 002b:00007fd1a05b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.484296] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1289.491621] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 1289.498892] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1289.506186] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1289.513501] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007fd1a05b26d4 [ 1289.520828] INFO: task syz-executor.2:19489 blocked for more than 140 seconds. [ 1289.528171] Not tainted 4.14.183-syzkaller #0 [ 1289.533765] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.541779] syz-executor.2 D28944 19489 6368 0x00000004 [ 1289.547406] Call Trace: [ 1289.550045] __schedule+0x8a6/0x1d70 [ 1289.553754] ? firmware_map_remove+0x18f/0x18f [ 1289.558327] ? lock_downgrade+0x6e0/0x6e0 [ 1289.562523] schedule+0x8d/0x1b0 [ 1289.565877] schedule_preempt_disabled+0xf/0x20 [ 1289.570584] __mutex_lock+0x5f0/0x1430 [ 1289.574459] ? lock_downgrade+0x6e0/0x6e0 [ 1289.578597] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.584081] ? ctrl_cdev_ioctl+0x190/0x220 [ 1289.588306] ? __mutex_unlock_slowpath+0x75/0x780 [ 1289.593197] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.598638] ? __get_mtd_device+0x130/0x130 [ 1289.602982] ? __might_fault+0x177/0x1b0 [ 1289.607048] ? ctrl_cdev_ioctl+0x190/0x220 [ 1289.611315] ctrl_cdev_ioctl+0x190/0x220 [ 1289.615381] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.620013] ? do_vfs_ioctl+0x76/0xfe0 [ 1289.623905] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.628474] do_vfs_ioctl+0x75a/0xfe0 [ 1289.632314] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1289.637943] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.642396] ? security_file_ioctl+0x76/0xb0 [ 1289.646794] ? security_file_ioctl+0x83/0xb0 [ 1289.651259] SyS_ioctl+0x7f/0xb0 [ 1289.654614] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1289.658564] do_syscall_64+0x1d5/0x640 [ 1289.663038] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.668229] RIP: 0033:0x45ca69 [ 1289.671459] RSP: 002b:00007fd1a0590c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.679161] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1289.686467] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000005 [ 1289.693789] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.701111] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1289.708366] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007fd1a05916d4 [ 1289.715700] INFO: task syz-executor.0:19496 blocked for more than 140 seconds. [ 1289.723105] Not tainted 4.14.183-syzkaller #0 [ 1289.728099] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1289.736105] syz-executor.0 D29712 19496 6363 0x00000004 [ 1289.741874] Call Trace: [ 1289.744485] __schedule+0x8a6/0x1d70 [ 1289.748176] ? firmware_map_remove+0x18f/0x18f [ 1289.752837] ? lock_downgrade+0x6e0/0x6e0 [ 1289.757017] schedule+0x8d/0x1b0 [ 1289.760462] schedule_preempt_disabled+0xf/0x20 [ 1289.765140] __mutex_lock+0x5f0/0x1430 [ 1289.769006] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.773347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1289.778793] ? __might_fault+0x104/0x1b0 [ 1289.782909] ? lock_acquire+0x170/0x3f0 [ 1289.786878] ? ctrl_cdev_ioctl+0x142/0x220 [ 1289.791703] ctrl_cdev_ioctl+0x142/0x220 [ 1289.795759] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.800373] ? selinux_file_ioctl+0x3f7/0x560 [ 1289.804858] ? ubi_cdev_compat_ioctl+0x30/0x30 [ 1289.809487] do_vfs_ioctl+0x75a/0xfe0 [ 1289.813277] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1289.818877] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.823316] ? security_file_ioctl+0x76/0xb0 [ 1289.827716] ? security_file_ioctl+0x83/0xb0 [ 1289.832172] SyS_ioctl+0x7f/0xb0 [ 1289.835525] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1289.839536] do_syscall_64+0x1d5/0x640 [ 1289.843423] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.848597] RIP: 0033:0x45ca69 [ 1289.851855] RSP: 002b:00007fb888611c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.859609] RAX: ffffffffffffffda RBX: 00000000004e10c0 RCX: 000000000045ca69 [ 1289.866861] RDX: 000000000076006e RSI: 0000000040046f41 RDI: 0000000000000003 [ 1289.874156] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1289.881455] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1289.888710] R13: 0000000000000209 R14: 00000000004c4501 R15: 00007fb8886126d4 [ 1289.896089] [ 1289.896089] Showing all locks held in the system: [ 1289.902449] 1 lock held by khungtaskd/1057: [ 1289.906830] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1289.915943] 1 lock held by syz-executor.3/19454: [ 1289.920746] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x142/0x220 [ 1289.929860] 1 lock held by syz-executor.3/19461: [ 1289.934604] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1289.943694] 1 lock held by syz-executor.4/19458: [ 1289.948430] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1289.957502] 1 lock held by syz-executor.5/19470: [ 1289.962306] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x142/0x220 [ 1289.971390] 1 lock held by syz-executor.5/19474: [ 1289.976124] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1289.985173] 1 lock held by syz-executor.1/19480: [ 1289.989981] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x142/0x220 [ 1289.999047] 1 lock held by syz-executor.1/19486: [ 1290.003835] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1290.012925] 1 lock held by syz-executor.2/19484: [ 1290.017660] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x142/0x220 [ 1290.026705] 1 lock held by syz-executor.2/19489: [ 1290.031529] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1290.040606] 1 lock held by syz-executor.0/19496: [ 1290.045338] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x142/0x220 [ 1290.054416] 1 lock held by syz-executor.0/19499: [ 1290.059169] #0: (ubi_devices_mutex){+.+.}, at: [] ctrl_cdev_ioctl+0x190/0x220 [ 1290.068214] [ 1290.069922] ============================================= [ 1290.069922] [ 1290.076974] NMI backtrace for cpu 1 [ 1290.080807] CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 4.14.183-syzkaller #0 [ 1290.088237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.097606] Call Trace: [ 1290.100182] dump_stack+0x1b2/0x283 [ 1290.103795] nmi_cpu_backtrace.cold+0x57/0x93 [ 1290.108267] ? irq_force_complete_move.cold+0x7b/0x7b [ 1290.113432] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 1290.118686] watchdog+0x5e2/0xb80 [ 1290.122116] ? hungtask_pm_notify+0x50/0x50 [ 1290.126410] kthread+0x30d/0x420 [ 1290.129751] ? kthread_create_on_node+0xd0/0xd0 [ 1290.134395] ret_from_fork+0x24/0x30 [ 1290.138241] Sending NMI from CPU 1 to CPUs 0: [ 1290.143035] NMI backtrace for cpu 0 [ 1290.143039] CPU: 0 PID: 8 Comm: rcu_preempt Not tainted 4.14.183-syzkaller #0 [ 1290.143042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.143045] task: ffff8880a9cde200 task.stack: ffff8880a9ce8000 [ 1290.143047] RIP: 0010:lock_acquire+0x3a/0x3f0 [ 1290.143050] RSP: 0018:ffff8880a9cefad0 EFLAGS: 00000082 [ 1290.143054] RAX: dffffc0000000000 RBX: ffff8880a9cde200 RCX: 0000000000000000 [ 1290.143057] RDX: ffff8880a9cdea84 RSI: 0000000000000000 RDI: ffff8880a9cdea84 [ 1290.143060] RBP: ffff8880aec2b598 R08: 0000000000000001 R09: 0000000000000000 [ 1290.143064] R10: 0000000000000000 R11: ffff8880941b8580 R12: 0000000000000000 [ 1290.143067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 1290.143070] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 1290.143073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1290.143076] CR2: 00007f32a6df0000 CR3: 000000009469b000 CR4: 00000000001406f0 [ 1290.143079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1290.143082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1290.143084] Call Trace: [ 1290.143086] ? __switch_to+0x7b9/0xfe0 [ 1290.143088] finish_task_switch+0x170/0x610 [ 1290.143090] ? finish_task_switch+0x14d/0x610 [ 1290.143092] __schedule+0x8ae/0x1d70 [ 1290.143094] ? schedule_timeout+0x4d5/0xe50 [ 1290.143096] ? firmware_map_remove+0x18f/0x18f [ 1290.143098] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1290.143100] schedule+0x8d/0x1b0 [ 1290.143102] schedule_timeout+0x4df/0xe50 [ 1290.143104] ? usleep_range+0x130/0x130 [ 1290.143106] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1290.143109] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1290.143111] ? run_timer_softirq+0x5b0/0x5b0 [ 1290.143113] rcu_gp_kthread+0xb3d/0x1ce0 [ 1290.143115] ? force_qs_rnp+0x4f0/0x4f0 [ 1290.143117] ? force_qs_rnp+0x4f0/0x4f0 [ 1290.143119] kthread+0x30d/0x420 [ 1290.143121] ? kthread_create_on_node+0xd0/0xd0 [ 1290.143123] ret_from_fork+0x24/0x30 [ 1290.143124] Code: 41 56 41 89 ce 41 55 41 89 d5 41 54 41 89 f4 55 48 89 fd 53 65 48 8b 1c 25 40 ee 01 00 48 8d bb 84 08 00 00 48 83 ec 18 48 89 fa <4c> 89 0c 24 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 [ 1290.143865] Kernel panic - not syncing: hung_task: blocked tasks [ 1290.358719] CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 4.14.183-syzkaller #0 [ 1290.366203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.375536] Call Trace: [ 1290.378106] dump_stack+0x1b2/0x283 [ 1290.381719] panic+0x1f9/0x42d [ 1290.384982] ? add_taint.cold+0x16/0x16 [ 1290.388944] ? irq_force_complete_move.cold+0x7b/0x7b [ 1290.394116] watchdog+0x5f3/0xb80 [ 1290.397543] ? hungtask_pm_notify+0x50/0x50 [ 1290.401848] kthread+0x30d/0x420 [ 1290.405196] ? kthread_create_on_node+0xd0/0xd0 [ 1290.409855] ret_from_fork+0x24/0x30 [ 1290.415196] Kernel Offset: disabled [ 1290.418824] Rebooting in 86400 seconds..