0xc) 11:31:35 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="756269667306", 0x0, &(0x7f0000000000)='adfs\x00') [ 853.837255] UBIFS error (pid: 4802): cannot open "ubi: [ 853.837255] nbd", error -19 11:31:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000080)={0xa3}) 11:31:35 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="7562696673f6", 0x0, &(0x7f0000000000)='adfs\x00') 11:31:36 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:36 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000080)={0xa3}) 11:31:36 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:31:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"000000000018000000000000bd6800", 0x43732e5398416f16}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:36 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:31:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c5828, &(0x7f0000000080)={0xa3}) [ 854.730199] UBIFS error (pid: 4831): cannot open "ubi: [ 854.730199] nbd", error -19 11:31:36 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:36 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 854.857156] UBIFS error (pid: 4844): cannot open "ubi: [ 854.857156] nbd", error -19 11:31:36 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:31:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000080)={0xa3}) [ 855.021731] UBIFS error (pid: 4856): cannot open "ubi: [ 855.021731] nbd", error -19 11:31:36 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 855.201409] UBIFS error (pid: 4866): cannot open "ubi: [ 855.201409] nbd", error -19 11:31:37 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(r0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f0000000080)={0xa3}) 11:31:37 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:37 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="75626966738c", 0x0, &(0x7f0000000000)='adfs\x00') 11:31:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x20, 0x20000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x10}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000005c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='children\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x6}, &(0x7f00000003c0)=0xc) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000640)={0x40, 0x7, 0x0, 0x7cc6525, 0x3ff, 0x101, 0x5, 0x9a3a, 0x40, 0x4, 0x100000000, 0xff00000}) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7b333a068c4ff696}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getrule={0x20, 0x22, 0x0, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x4, 0x10000}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000006c0)={r3, 0xc1}, &(0x7f0000000440)=0x8) ioctl(r1, 0x4, &(0x7f0000000240)="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") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x21}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x100}) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) socket$netlink(0x10, 0x3, 0x1e) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) bind$vsock_stream(r5, &(0x7f0000000380)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 11:31:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f0000000080)={0xa3}) 11:31:37 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="756269667302", 0x0, &(0x7f0000000000)='adfs\x00') 11:31:37 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:37 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:37 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:31:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f0000000080)={0xa3}) 11:31:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x10080, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x7f000000, @loopback, 0x3}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r3 = socket(0x0, 0x2, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000200)=0x1e) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:37 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="7562696673ff", 0x0, &(0x7f0000000000)='adfs\x00') [ 856.241058] UBIFS error (pid: 4909): cannot open "ubi: [ 856.241058] nbd", error -19 11:31:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f0000000080)={0xa3}) 11:31:38 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:38 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7a000000, &(0x7f0000000000)='adfs\x00') 11:31:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000080)={0xa3}) [ 856.882768] UBIFS error (pid: 4926): cannot open "ubi: [ 856.882768] nbd", error -19 [ 856.922016] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor4' sets config #163 11:31:38 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x40000000, &(0x7f0000000000)='adfs\x00') 11:31:38 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 857.054285] UBIFS error (pid: 4936): cannot open "ubi: [ 857.054285] nbd", error -19 11:31:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f0000000080)={0xa3}) 11:31:38 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:38 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x8cffffff, &(0x7f0000000000)='adfs\x00') 11:31:38 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) fallocate(r0, 0x20, 0x6a, 0x8001) ioctl(r2, 0x40044104, &(0x7f0000001f64)) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x1, 0x2, 0x2, 0x4, "4c00ab6d9b4aa596128980878b22a903b7c8baae5f01e8e59f96941e451b7d3ba3e44deb770c"}, 0x36) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000080)={0xa3}) 11:31:39 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4c00, &(0x7f0000000000)='adfs\x00') [ 857.580659] UBIFS error (pid: 4970): cannot open "ubi: [ 857.580659] nbd", error -19 11:31:39 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xc) 11:31:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000080)={0xa3}) 11:31:39 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4, &(0x7f0000000000)='adfs\x00') 11:31:39 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:39 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 858.317274] vhci_hcd: invalid port number 0 11:31:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1c1000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x7ff, 0x0, 0x3c7, 0x140000000000, 0x6}) write$cgroup_subtree(r3, &(0x7f0000000200)={[{0x2b, 'cpu'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'rdma'}]}, 0x17) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 858.341780] UBIFS error (pid: 4981): cannot open "ubi: [ 858.341780] nbd", error -19 11:31:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x8cffffff00000000, &(0x7f0000000000)='adfs\x00') 11:31:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000080)={0xa3}) 11:31:40 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7, &(0x7f0000000000)='adfs\x00') 11:31:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185508, &(0x7f0000000080)={0xa3}) [ 858.531640] UBIFS error (pid: 4995): cannot open "ubi: [ 858.531640] nbd", error -19 11:31:40 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 858.765299] UBIFS error (pid: 5006): cannot open "ubi: [ 858.765299] nbd", error -19 11:31:40 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xffffffeb, &(0x7f0000000000)='adfs\x00') 11:31:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)={0xa3}) 11:31:40 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:40 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[]}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7fff, 0x400040) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x7fffffff, 0x1, 0x101, 0x4, 0x40, 0x10000, 0x96ce}, 0x1c) 11:31:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000080)={0xa3}) 11:31:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7a00000000000000, &(0x7f0000000000)='adfs\x00') 11:31:41 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000080)={0xa3}) 11:31:41 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7400, &(0x7f0000000000)='adfs\x00') [ 859.503988] UBIFS error (pid: 5041): cannot open "ubi: [ 859.503988] nbd", error -19 11:31:41 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6c, &(0x7f0000000000)='adfs\x00') 11:31:41 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:41 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8d9, 0x200000) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000200)={0x3, 0x1f}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000008a90"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:41 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x48, &(0x7f0000000000)='adfs\x00') 11:31:42 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xedc000000000, &(0x7f0000000000)='adfs\x00') 11:31:42 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:42 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x74, &(0x7f0000000000)='adfs\x00') [ 860.500052] UBIFS error (pid: 5072): cannot open "ubi: [ 860.500052] nbd", error -19 11:31:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000080)={0xa3}) 11:31:42 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x68, &(0x7f0000000000)='adfs\x00') 11:31:42 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000080)={0xa3}) 11:31:42 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xc0ed0000, &(0x7f0000000000)='adfs\x00') 11:31:42 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x6, 0x200) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r1, 0x0, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@v1={0x2, "a9e9ce1d157ac628c308"}, 0xb, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002880)='/dev/sequencer2\x00', 0x10002, 0x0) connect$pppoe(r5, &(0x7f00000028c0)={0x18, 0x0, {0x4, @remote}}, 0x1e) pread64(r3, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18f626ea1f00000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @loopback}}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0xffffffffffffffff) 11:31:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa1}) 11:31:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:42 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 861.342658] UBIFS error (pid: 5101): cannot open "ubi: [ 861.342658] nbd", error -19 11:31:43 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xebffffff00000000, &(0x7f0000000000)='adfs\x00') [ 861.441864] usb usb5: usbfs: process 5113 (syz-executor4) did not claim interface 0 before use 11:31:43 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4c000000}) [ 861.520572] UBIFS error (pid: 5119): cannot open "ubi: [ 861.520572] nbd", error -19 11:31:43 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4000000000000000, &(0x7f0000000000)='adfs\x00') 11:31:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x500}) 11:31:43 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 861.902135] UBIFS error (pid: 5140): cannot open "ubi: [ 861.902135] nbd", error -19 [ 861.937564] vhci_hcd: invalid port number 0 11:31:43 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x1000000, &(0x7f0000000000)='adfs\x00') [ 862.286591] UBIFS error (pid: 5148): cannot open "ubi: [ 862.286591] nbd", error -19 11:31:44 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x20040, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x134, 0x11, 0xa, 0x0, 0x70bd29, 0x25dfdbfe, {0x5}, [@typed={0x4, 0x31}, @nested={0x2c, 0x46, [@typed={0x1c, 0x18, @str='}md5sum#/,+\\]eth0eth0\x00'}, @typed={0xc, 0x5b, @u64=0x2}]}, @nested={0xf0, 0x54, [@typed={0x8, 0xc, @u32=0x1f}, @typed={0x8, 0x4f, @u32=0x1}, @typed={0x10, 0x1e, @binary="a54a4d4b86cbcd9a4921ec"}, @generic, @typed={0x8, 0x4e, @u32=0xc12}, @generic="b8605a431d4b44119a17be3e5b6304f6b54052e26554755b9afd3d2b7df8ed5dbc96f58b18150aa37a5891413168a5190e460d96a609482eb377d7f4421ce833bb363e351cea9a207720bc0cecdcc268bde0b9f686496920c1394550d90b345675abb9c3e1cd2e865d969bea81c5b99678ee5c38c107654e3243106a52b8dcf0b069cd6e6d8eb018257c5402e4770a3a194153642087d53d8a0cbb4cd389ee27d4b76b24e0d0374305b7b431da14ee05867e64822c06e7871372c46729980c0c1a560401"]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000890}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="19001b00005490f26ca99e945f3306ee73fac17acb0000000000000000bc0000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6}) 11:31:44 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x500, &(0x7f0000000000)='adfs\x00') 11:31:44 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xffffff7f00000000}) 11:31:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:44 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x2, &(0x7f0000000000)='adfs\x00') [ 862.546598] UBIFS error (pid: 5156): cannot open "ubi: [ 862.546598] nbd", error -19 [ 862.735217] vhci_hcd: invalid port number 0 11:31:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6800000000000000}) [ 862.809185] UBIFS error (pid: 5180): cannot open "ubi: [ 862.809185] nbd", error -19 11:31:44 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xffff1f0000000000, &(0x7f0000000000)='adfs\x00') [ 863.028213] UBIFS error (pid: 5187): cannot open "ubi: [ 863.028213] nbd", error -19 [ 863.045001] vhci_hcd: invalid port number 0 11:31:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c00000000000000}) 11:31:44 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xffffffff00000000, &(0x7f0000000000)='adfs\x00') [ 863.269789] UBIFS error (pid: 5194): cannot open "ubi: [ 863.269789] nbd", error -19 [ 863.273274] vhci_hcd: invalid port number 0 11:31:45 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:45 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x48000000, &(0x7f0000000000)='adfs\x00') 11:31:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x5000000}) 11:31:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x6, 0x7fff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7f, 0x1, 0x100000000, 0x1}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e22, 0x5da, @ipv4={[], [], @multicast1}, 0x439}}, 0x8, 0x80000000, 0xffffffffffffc3b6, 0x0, 0x31}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x3ff}}, 0x4, 0x7, 0x9b6f, 0x48, 0x22}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x0, @empty, 0xb9}}, 0x7, 0xff}, &(0x7f0000000380)=0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) get_thread_area(&(0x7f0000000600)={0xfffffffffffffffd, 0x20001000, 0x400, 0x0, 0x5, 0x0, 0x100000000, 0xb3, 0x5, 0xbc}) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 863.642669] vhci_hcd: invalid port number 0 11:31:45 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:45 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x700000000000000, &(0x7f0000000000)='adfs\x00') [ 863.668768] UBIFS error (pid: 5203): cannot open "ubi: [ 863.668768] nbd", error -19 11:31:45 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7}) 11:31:45 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x3000000, &(0x7f0000000000)='adfs\x00') [ 863.857829] UBIFS error (pid: 5220): cannot open "ubi: [ 863.857829] nbd", error -19 11:31:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x208000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0xfffffe72, 0x800000000000000) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x1}}, 0x0) sysfs$1(0x1, &(0x7f00000002c0)='vboxnet0trustedwlan0eth1nodev-mime_type)security\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'veth1_to_bond\x00', 0x110}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x10000, 0x2}, {0x1f, 0x3ff}, 0x4, 0x6, 0xffffffffffffffc0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x8}) 11:31:45 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x1f00, &(0x7f0000000000)='adfs\x00') [ 864.107687] UBIFS error (pid: 5231): cannot open "ubi: [ 864.107687] nbd", error -19 11:31:45 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x100000000000000}) 11:31:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '\x00'}, &(0x7f0000000240)="766574000000000000000000bd6800", 0xf, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:46 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:46 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7a00, &(0x7f0000000000)='adfs\x00') [ 864.457938] vhci_hcd: invalid port number 0 11:31:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6000000}) 11:31:46 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:46 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6800000000000000, &(0x7f0000000000)='adfs\x00') 11:31:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xa000000}) [ 865.017677] UBIFS error (pid: 5279): cannot open "ubi: [ 865.017677] nbd", error -19 [ 865.021961] vhci_hcd: invalid port number 0 11:31:46 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x400000000000000, &(0x7f0000000000)='adfs\x00') 11:31:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x1000000}) 11:31:46 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:46 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 865.248528] UBIFS error (pid: 5296): cannot open "ubi: [ 865.248528] nbd", error -19 11:31:46 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x3f000000, &(0x7f0000000000)='adfs\x00') [ 865.349679] vhci_hcd: invalid port number 0 11:31:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000200)='cpuset\x00') pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6800, &(0x7f0000000000)='adfs\x00') 11:31:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7a}) [ 865.480862] UBIFS error (pid: 5315): cannot open "ubi: [ 865.480862] nbd", error -19 [ 865.726896] vhci_hcd: invalid port number 122 11:31:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6, &(0x7f0000000000)='adfs\x00') 11:31:47 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x10}) 11:31:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xffffff8c, &(0x7f0000000000)='adfs\x00') [ 865.895263] UBIFS error (pid: 5332): cannot open "ubi: [ 865.895263] nbd", error -19 11:31:47 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r3, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 866.028996] vhci_hcd: invalid port number 16 11:31:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x2000, &(0x7f0000000000)='adfs\x00') 11:31:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7400}) 11:31:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x5, &(0x7f0000000000)='adfs\x00') 11:31:47 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe8"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 866.441954] vhci_hcd: invalid port number 0 11:31:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x400000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x3}) [ 866.497133] UBIFS error (pid: 5360): cannot open "ubi: [ 866.497133] nbd", error -19 11:31:48 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7a, &(0x7f0000000000)='adfs\x00') 11:31:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4000000}) 11:31:48 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:48 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x68000000, &(0x7f0000000000)='adfs\x00') [ 866.923549] vhci_hcd: invalid port number 0 11:31:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x48}) [ 867.009072] UBIFS error (pid: 5384): cannot open "ubi: [ 867.009072] nbd", error -19 [ 867.047402] UBIFS error (pid: 5384): cannot open "ubi: [ 867.047402] nbd", error -19 [ 867.090566] vhci_hcd: invalid port number 72 11:31:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:48 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x300, &(0x7f0000000000)='adfs\x00') 11:31:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x200000000000000}) 11:31:48 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 867.420822] UBIFS error (pid: 5396): cannot open "ubi: [ 867.420822] nbd", error -19 [ 867.458757] vhci_hcd: invalid port number 0 11:31:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x600, &(0x7f0000000000)='adfs\x00') [ 867.639690] UBIFS error (pid: 5411): cannot open "ubi: [ 867.639690] nbd", error -19 11:31:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fcntl$setsig(r0, 0xa, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="18eaee8828a4c47a8586f876837ae230071efa70d58dace7bc18c9008cdc2373da78871b93c3ec335eb06e9d5b96c3c0154dfab40ed563597800f261b9a0cd87baa06c94f5d7d13ef673090289c813e16bd1462796a535cf4655dd9ed48d21093491132e111a68f01eec690ad5f0258096b6db8914faeaa2df4a8aa61ecf6b323c4be9b55cfa3c1d503c6737e13857752f75"]]], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x8000000}) 11:31:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4000, &(0x7f0000000000)='adfs\x00') [ 867.880129] vhci_hcd: invalid port number 0 11:31:49 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 867.916311] UBIFS error (pid: 5421): cannot open "ubi: [ 867.916311] nbd", error -19 [ 867.924223] vhci_hcd: invalid port number 0 11:31:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xfffffff6, &(0x7f0000000000)='adfs\x00') 11:31:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4c00}) [ 868.073903] vhci_hcd: invalid port number 0 11:31:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x3, &(0x7f0000000000)='adfs\x00') [ 868.259506] UBIFS error (pid: 5437): cannot open "ubi: [ 868.259506] nbd", error -19 11:31:49 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4800}) 11:31:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x40000, &(0x7f0000000000)='adfs\x00') 11:31:49 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 868.435063] vhci_hcd: invalid port number 0 11:31:50 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4000000, &(0x7f0000000000)='adfs\x00') [ 868.547663] UBIFS error (pid: 5455): cannot open "ubi: [ 868.547663] nbd", error -19 11:31:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipddp0\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:50 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x5}) 11:31:50 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:50 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x5000000, &(0x7f0000000000)='adfs\x00') [ 868.913305] UBIFS error (pid: 5464): cannot open "ubi: [ 868.913305] nbd", error -19 11:31:50 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:31:50 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x1f000000, &(0x7f0000000000)='adfs\x00') [ 869.174391] vhci_hcd: invalid port number 108 [ 869.209911] vhci_hcd: vhci_device speed not set 11:31:50 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x48000000}) 11:31:50 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:50 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 869.365354] UBIFS error (pid: 5480): cannot open "ubi: [ 869.365354] nbd", error -19 [ 869.371453] UBIFS error (pid: 5480): cannot open "ubi: [ 869.371453] nbd", error -19 11:31:51 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7000000}) 11:31:51 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x20000000, &(0x7f0000000000)='adfs\x00') [ 869.604029] vhci_hcd: invalid port number 0 11:31:51 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x300}) [ 869.681854] UBIFS error (pid: 5497): cannot open "ubi: [ 869.681854] nbd", error -19 11:31:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0xc0000000, 0x84401) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000004c0)=""/37) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) getsockname(r1, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000040)=0x80) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000500)={0x4, 0x1, 0x100, 0x6, 0x7, 0x2}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0xb00, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x7fffc) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000200)=r5) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="0603000000000000810000230020000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:51 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x2000000, &(0x7f0000000000)='adfs\x00') 11:31:51 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:51 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:51 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 870.400207] vhci_hcd: invalid port number 0 11:31:52 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xf6ffffff, &(0x7f0000000000)='adfs\x00') 11:31:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xffffffff00000000}) [ 870.405419] UBIFS error (pid: 5513): cannot open "ubi: [ 870.405419] nbd", error -19 [ 870.649662] vhci_hcd: invalid port number 0 11:31:52 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xffff1f00, &(0x7f0000000000)='adfs\x00') 11:31:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7400000000000000}) [ 870.942872] vhci_hcd: invalid port number 0 11:31:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xa00000000000000}) 11:31:52 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4800, &(0x7f0000000000)='adfs\x00') [ 871.265547] vhci_hcd: invalid port number 0 11:31:52 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x3f00000000000000, &(0x7f0000000000)='adfs\x00') [ 871.286122] UBIFS error (pid: 5544): cannot open "ubi: [ 871.286122] nbd", error -19 [ 871.294538] vhci_hcd: invalid port number 0 11:31:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xd735, 0xfff]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7effffff, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0001000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7a00000000000000}) [ 871.383048] UBIFS error (pid: 5547): cannot open "ubi: [ 871.383048] nbd", error -19 [ 871.413199] vhci_hcd: invalid port number 0 11:31:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x300000000000000}) 11:31:53 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x2000000000000000, &(0x7f0000000000)='adfs\x00') [ 871.502235] vhci_hcd: invalid port number 0 [ 871.516266] UBIFS error (pid: 5563): cannot open "ubi: [ 871.516266] nbd", error -19 11:31:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x3000000}) 11:31:53 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x200000000000000, &(0x7f0000000000)='adfs\x00') 11:31:53 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r1, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x600000000000000, &(0x7f0000000000)='adfs\x00') [ 871.669862] UBIFS error (pid: 5577): cannot open "ubi: [ 871.669862] nbd", error -19 [ 871.741262] vhci_hcd: invalid port number 0 [ 871.874474] UBIFS error (pid: 5587): cannot open "ubi: [ 871.874474] nbd", error -19 11:31:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x74}) 11:31:53 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x700, &(0x7f0000000000)='adfs\x00') 11:31:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x4, 0xb, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDMKTONE(r1, 0x4b30, 0xff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x50, &(0x7f0000000200)}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000fda828f2ce5a67cd0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:53 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 872.416162] vhci_hcd: invalid port number 116 11:31:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7a000000}) 11:31:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4c00000000000000, &(0x7f0000000000)='adfs\x00') [ 872.431535] UBIFS error (pid: 5605): cannot open "ubi: [ 872.431535] nbd", error -19 11:31:54 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r1, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x2000000}) [ 872.563649] UBIFS error (pid: 5621): cannot open "ubi: [ 872.563649] nbd", error -19 11:31:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6c00000000000000, &(0x7f0000000000)='adfs\x00') [ 872.643604] vhci_hcd: invalid port number 0 11:31:54 executing program 3: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x2000}) [ 872.753052] UBIFS error (pid: 5630): cannot open "ubi: [ 872.753052] nbd", error -19 11:31:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xebffffff, &(0x7f0000000000)='adfs\x00') [ 872.884244] vhci_hcd: invalid port number 0 11:31:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x2000000000000000}) [ 873.271216] vhci_hcd: invalid port number 0 11:31:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f0000000040)=""/39, 0x6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6000000, &(0x7f0000000000)='adfs\x00') 11:31:54 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x800000000000000}) [ 873.449003] UBIFS error (pid: 5659): cannot open "ubi: [ 873.449003] nbd", error -19 [ 873.462385] vhci_hcd: invalid port number 0 11:31:55 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6c000000, &(0x7f0000000000)='adfs\x00') 11:31:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x68000000}) 11:31:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x100000}) 11:31:55 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x3f00, &(0x7f0000000000)='adfs\x00') [ 873.678537] UBIFS error (pid: 5670): cannot open "ubi: [ 873.678537] nbd", error -19 [ 873.778700] vhci_hcd: invalid port number 0 11:31:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c000000}) 11:31:55 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4c, &(0x7f0000000000)='adfs\x00') 11:31:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000240)={0x100000001, 0x5, 0x1}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x400, 0x20000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'ifb0\x00', 0x4000}) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:55 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4000000000000, &(0x7f0000000000)='adfs\x00') 11:31:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x700}) 11:31:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:55 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 874.404381] UBIFS error (pid: 5706): cannot open "ubi: [ 874.404381] nbd", error -19 [ 874.437216] vhci_hcd: invalid port number 0 11:31:56 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x1f00000000000000, &(0x7f0000000000)='adfs\x00') 11:31:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xffffff7f}) 11:31:56 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:56 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xf6ffffff00000000, &(0x7f0000000000)='adfs\x00') 11:31:56 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c00}) [ 874.559298] UBIFS error (pid: 5722): cannot open "ubi: [ 874.559298] nbd", error -19 [ 874.723782] UBIFS error (pid: 5733): cannot open "ubi: [ 874.723782] nbd", error -19 [ 874.754493] vhci_hcd: invalid port number 0 11:31:57 executing program 2: r0 = memfd_create(&(0x7f00000016c0)="766574000000000000000000bd6800", 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001700)={0x1, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x79, "5292bac478947b57163bef2512fb107309eb1b274cf43df74df0bac4aae61646ba946505457e11ee3574e5487bfd8cac66f135cc15dd9910dc5c3182859ab8596841796a1e5e0cdff3a4c8406b10a024b1d6b3551eb6f8e18b5bf3a92c489e0c3a3dcae78cd0d695caef5e1c45b682e65865b858c2b104484b"}, &(0x7f0000000440)=0x81) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r1, 0xd0, 0x30}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r2, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0300de397572ec0008001b000000000020eb38a11121f84550688f3ad9fc201e06824df11d66147ca6dc825bee0b88b74c8938d8a864e8cb2696df13a8e8fa30fd1b664565ca618066c7ccfdf87c99a5fec5c9d579400a83d1329d7484f5c63f13f3d719fb6a546d5508bc8225f478da43e49b06843024f184ee0389d3545f583a1a41981aece65d2003278425343e9f39673be427a2b417ef5fdda8f5aa61e99d283d46c231fe8e64b40f63e795703b76fde2259017a5b27ec2c59988ab8f049a274a3257df5b0e44045f348b53cadc8a849d8691962bb618986d447e"], 0x1}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) 11:31:57 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:57 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x74000000, &(0x7f0000000000)='adfs\x00') 11:31:57 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6800}) 11:31:57 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 875.680838] UBIFS error (pid: 5755): cannot open "ubi: [ 875.680838] nbd", error -19 [ 875.689449] vhci_hcd: invalid port number 0 11:31:57 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:57 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7000000, &(0x7f0000000000)='adfs\x00') 11:31:57 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x6c00, &(0x7f0000000000)='adfs\x00') 11:31:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x60}) [ 875.774175] UBIFS error (pid: 5765): cannot open "ubi: [ 875.774175] nbd", error -19 [ 875.981255] vhci_hcd: invalid port number 96 11:31:57 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x1fffff, &(0x7f0000000000)='adfs\x00') 11:31:57 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xa}) 11:31:58 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x100000000000000, &(0x7f0000000000)='adfs\x00') 11:31:58 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x48242, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000200)={0x8, 0x3, 0x8, 0x100000001}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f19}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f0000000280)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:58 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4800000000000000, &(0x7f0000000000)='adfs\x00') [ 876.705400] UBIFS error (pid: 5796): cannot open "ubi: [ 876.705400] nbd", error -19 [ 876.729179] vhci_hcd: invalid port number 10 11:31:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x400000000000000}) 11:31:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:58 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 876.863279] UBIFS error (pid: 5812): cannot open "ubi: [ 876.863279] nbd", error -19 [ 876.937250] vhci_hcd: invalid port number 0 11:31:58 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x500000000000000, &(0x7f0000000000)='adfs\x00') 11:31:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x500000000000000}) [ 877.096272] UBIFS error (pid: 5826): cannot open "ubi: [ 877.096272] nbd", error -19 [ 877.215774] vhci_hcd: invalid port number 0 11:31:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x7400000000000000, &(0x7f0000000000)='adfs\x00') 11:31:59 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 877.568453] UBIFS error (pid: 5835): cannot open "ubi: [ 877.568453] nbd", error -19 11:31:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0xc621}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:31:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4800000000000000}) 11:31:59 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x300000000000000, &(0x7f0000000000)='adfs\x00') 11:31:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 877.895690] UBIFS error (pid: 5857): cannot open "ubi: [ 877.895690] nbd", error -19 11:31:59 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x4c000000, &(0x7f0000000000)='adfs\x00') [ 877.943009] vhci_hcd: invalid port number 0 11:31:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x600}) 11:31:59 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xedc0, &(0x7f0000000000)='adfs\x00') [ 877.996096] UBIFS error (pid: 5867): cannot open "ubi: [ 877.996096] nbd", error -19 [ 878.102397] vhci_hcd: invalid port number 0 11:31:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:31:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x2}) 11:32:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="034000000000006068dae66d1fe89419"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:00 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='%dfs\x00') 11:32:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x600000000000000}) 11:32:00 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:00 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:00 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 878.975502] vhci_hcd: invalid port number 0 11:32:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6000000000000000}) 11:32:00 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a#fs\x00') [ 879.022040] UBIFS error (pid: 5907): cannot open "ubi: [ 879.022040] nbd", error -19 [ 879.168520] vhci_hcd: invalid port number 0 11:32:00 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a.fs\x00') [ 879.173178] UBIFS error (pid: 5921): cannot open "ubi: [ 879.173178] nbd", error -19 11:32:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x20000000}) [ 879.351437] UBIFS error (pid: 5924): cannot open "ubi: [ 879.351437] nbd", error -19 11:32:01 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a0fs\x00') 11:32:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x74000000}) [ 879.783336] UBIFS error (pid: 5930): cannot open "ubi: [ 879.783336] nbd", error -19 11:32:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:01 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='apfs\x00') 11:32:01 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4), 0xc) 11:32:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x68}) 11:32:01 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:01 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 880.312722] IPVS: stopping master sync thread 18502 ... [ 880.319306] vhci_hcd: invalid port number 104 [ 880.327457] UBIFS error (pid: 5951): cannot open "ubi: [ 880.327457] nbd", error -19 [ 880.344444] IPVS: stopping backup sync thread 18498 ... 11:32:01 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a%fs\x00') 11:32:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4c}) [ 880.433129] UBIFS error (pid: 5961): cannot open "ubi: [ 880.433129] nbd", error -19 [ 880.459713] vhci_hcd: invalid port number 76 11:32:02 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a+fs\x00') [ 880.511195] vhci_hcd: vhci_device speed not set 11:32:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x700000000000000}) [ 880.636491] UBIFS error (pid: 5970): cannot open "ubi: [ 880.636491] nbd", error -19 11:32:02 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aXfs\x00') [ 880.850954] vhci_hcd: invalid port number 0 [ 880.989357] device bridge_slave_1 left promiscuous mode [ 881.037359] UBIFS error (pid: 5976): cannot open "ubi: [ 881.037359] nbd", error -19 [ 881.059732] bridge0: port 2(bridge_slave_1) entered disabled state 11:32:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x60000000}) [ 881.180928] device bridge_slave_0 left promiscuous mode [ 881.219691] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.713348] team0 (unregistering): Port device team_slave_1 removed [ 883.724416] team0 (unregistering): Port device team_slave_0 removed [ 883.736207] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 883.748557] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 883.776613] bond0 (unregistering): Released all slaves 11:32:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x10000, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000000000008001b00000000008ce5829ec3072195e190fdb247060a675662329d053b06511542cf0abb5be28612ccb1fa8dc42b7e36af982db4bced7f"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:05 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a*fs\x00') 11:32:05 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:05 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x7a00}) 11:32:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 883.935084] vhci_hcd: invalid port number 0 11:32:05 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='asfs\x00') 11:32:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4}) [ 883.953016] UBIFS error (pid: 5996): cannot open "ubi: [ 883.953016] nbd", error -19 11:32:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) [ 884.100424] UBIFS error (pid: 6006): cannot open "ubi: [ 884.100424] nbd", error -19 11:32:05 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='acfs\x00') 11:32:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x10000000000000}) [ 884.281618] input: syz1 as /devices/virtual/input/input31 [ 884.390335] UBIFS error (pid: 6021): cannot open "ubi: [ 884.390335] nbd", error -19 [ 884.402957] vhci_hcd: invalid port number 0 11:32:06 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aofs\x00') [ 884.756790] UBIFS error (pid: 6026): cannot open "ubi: [ 884.756790] nbd", error -19 11:32:06 executing program 5: fanotify_init(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) 11:32:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x4c00000000000000}) 11:32:06 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='alfs\x00') 11:32:06 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010053aaaaaaaabb"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000000000004c000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:06 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 884.995363] vhci_hcd: invalid port number 0 11:32:06 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='axfs\x00') [ 885.016943] UBIFS error (pid: 6035): cannot open "ubi: [ 885.016943] nbd", error -19 11:32:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6000}) 11:32:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) pread64(r2, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) mmap$xdp(&(0x7f0000106000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x180000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x8001}, &(0x7f00000000c0)=0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) dup2(r0, r3) [ 885.108419] UBIFS error (pid: 6050): cannot open "ubi: [ 885.108419] nbd", error -19 11:32:06 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aifs\x00') [ 885.196187] vhci_hcd: invalid port number 0 11:32:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0xa00}) [ 885.372585] UBIFS error (pid: 6064): cannot open "ubi: [ 885.372585] nbd", error -19 11:32:07 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aufs\x00') [ 885.489433] vhci_hcd: invalid port number 0 11:32:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000000)='-posix_acl_accesswlan0+ppp1\x00') 11:32:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6}) [ 885.694150] UBIFS error (pid: 6073): cannot open "ubi: [ 885.694150] nbd", error -19 11:32:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000440), &(0x7f0000002040)) [ 885.791553] vhci_hcd: invalid port number 0 11:32:07 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10400, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0xff, @empty, 0x4e20, 0x2, 'fo\x00', 0x1f, 0x9, 0x3b}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b06b845cea6339ad4d443dfa0c6a1aaf07ff04db89c475f5391f40e9a2428c615a803b7aecb45be98f5f4567cbe0db3759a16eb5181aea446b6b1298e54b"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x208000, 0x0) 11:32:07 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aefs\x00') 11:32:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x700000000000000}) 11:32:07 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 886.079704] vhci_hcd: invalid port number 0 11:32:07 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='a-fs\x00') 11:32:07 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 886.087725] UBIFS error (pid: 6099): cannot open "ubi: [ 886.087725] nbd", error -19 11:32:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7a000000}) 11:32:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0xfffffffffffffffd, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f00000002c0)={0x46, &(0x7f0000000240)=""/70}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:07 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='ad.s\x00') [ 886.250922] UBIFS error (pid: 6114): cannot open "ubi: [ 886.250922] nbd", error -19 [ 886.278397] vhci_hcd: invalid port number 0 11:32:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7a00}) [ 886.492382] UBIFS error (pid: 6126): cannot open "ubi: [ 886.492382] nbd", error -19 [ 886.523988] vhci_hcd: invalid port number 0 11:32:08 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='ad/s\x00') [ 886.862069] UBIFS error (pid: 6131): cannot open "ubi: [ 886.862069] nbd", error -19 11:32:08 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:08 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfd\x00') 11:32:08 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xa00}) [ 887.197499] vhci_hcd: invalid port number 0 11:32:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) chdir(&(0x7f00000022c0)='\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f0000002300)=""/39, 0x27, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="03000880000000ed0708000000000000"], 0x1}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000240)={0x2, 0x0, 0x2080, {0x1, 0xd000, 0x1}, [], "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", "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"}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:08 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4c00000000000000}) [ 887.210878] UBIFS error (pid: 6140): cannot open "ubi: [ 887.210878] nbd", error -19 11:32:08 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfc\x00') [ 887.360646] vhci_hcd: invalid port number 0 11:32:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x100000000000000}) [ 887.395154] UBIFS error (pid: 6156): cannot open "ubi: [ 887.395154] nbd", error -19 11:32:09 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf-\x00') [ 887.479872] vhci_hcd: invalid port number 0 11:32:09 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf0\x00') 11:32:09 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x2000000000000000}) [ 887.587990] UBIFS error (pid: 6168): cannot open "ubi: [ 887.587990] nbd", error -19 [ 887.657587] UBIFS error (pid: 6170): cannot open "ubi: [ 887.657587] nbd", error -19 [ 887.797017] vhci_hcd: invalid port number 0 11:32:09 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[]}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:09 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xffffff7f00000000}) 11:32:09 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:09 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfu\x00') [ 888.200760] vhci_hcd: invalid port number 0 [ 888.211089] UBIFS error (pid: 6186): cannot open "ubi: [ 888.211089] nbd", error -19 11:32:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000dba855ffde1998fef2f7b4dd9c0b5b7d16be9503e65cb5c7ea51c05c072c100a969ef853d6c26836ca8699d63a6de4ddedc004d187239653e4191262e40202dd4a325fdf5200cd5dbf8be636ceba0006c99f48a144ee74cc4002418a6da8f48dda5bb1cba599750dfb6133293f9e91ef92e5a196f9d6809fa8c55fcc2788a94f5d1c10c832cf9d1ef56caa3d2e376432085231"], 0x1}}, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.redirect\x00', &(0x7f0000000240)=""/223, 0xdf) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:10 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:10 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf.\x00') 11:32:10 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x8000000}) 11:32:10 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 888.711750] UBIFS error (pid: 6200): cannot open "ubi: [ 888.711750] nbd", error -19 [ 888.715976] vhci_hcd: invalid port number 0 11:32:10 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfp\x00') 11:32:10 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x500}) 11:32:10 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfl\x00') [ 888.857095] UBIFS error (pid: 6211): cannot open "ubi: [ 888.857095] nbd", error -19 [ 889.137303] vhci_hcd: invalid port number 0 [ 889.154507] UBIFS error (pid: 6219): cannot open "ubi: [ 889.154507] nbd", error -19 11:32:10 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf#\x00') 11:32:10 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4800}) 11:32:10 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:10 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 889.443950] vhci_hcd: invalid port number 0 11:32:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x800, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x8004e25, 0x7f000003, @mcast2, 0x1000}, 0xfffffffffffffd90) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 889.453321] UBIFS error (pid: 6229): cannot open "ubi: [ 889.453321] nbd", error -19 11:32:11 executing program 5: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfl\x00') 11:32:11 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf*\x00') 11:32:11 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x5}) [ 889.820776] vhci_hcd: invalid port number 0 11:32:11 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfi\x00') [ 889.867704] UBIFS error (pid: 6248): cannot open "ubi: [ 889.867704] nbd", error -19 11:32:11 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7a00000000000000}) [ 889.904310] UBIFS error (pid: 6250): cannot open "ubi: [ 889.904310] nbd", error -19 11:32:11 executing program 5: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='aofs\x00') [ 890.053595] vhci_hcd: invalid port number 0 [ 890.074853] UBIFS error (pid: 6256): cannot open "ubi: [ 890.074853] nbd", error -19 11:32:11 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:11 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf+\x00') [ 890.195350] UBIFS error (pid: 6260): cannot open "ubi: [ 890.195350] nbd", error -19 11:32:11 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xa00000000000000}) 11:32:11 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:11 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 890.368281] vhci_hcd: invalid port number 0 [ 890.385480] UBIFS error (pid: 6270): cannot open "ubi: [ 890.385480] nbd", error -19 11:32:12 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0x7f, 0xfffffffffffffffc, 0x5, 0x2, 0x80}, &(0x7f0000000380)=0x98) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xffffff08, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001f0000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40005}, 0xffffffffbffffffe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) readahead(r1, 0x401, 0xb6) 11:32:12 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x48000000}) [ 890.392857] UBIFS error (pid: 6270): cannot open "ubi: [ 890.392857] nbd", error -19 11:32:12 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfo\x00') [ 890.627725] vhci_hcd: invalid port number 0 11:32:12 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x60000000}) [ 890.740862] UBIFS error (pid: 6289): cannot open "ubi: [ 890.740862] nbd", error -19 11:32:12 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfX\x00') 11:32:12 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:12 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 891.301772] UBIFS error (pid: 6297): cannot open "ubi: [ 891.301772] nbd", error -19 [ 891.339216] vhci_hcd: invalid port number 0 11:32:12 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfx\x00') 11:32:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/103) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:12 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:13 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6000000}) [ 891.472617] UBIFS error (pid: 6313): cannot open "ubi: [ 891.472617] nbd", error -19 [ 891.532228] vhci_hcd: invalid port number 0 11:32:13 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adf%\x00') 11:32:13 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4c00}) 11:32:13 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673ff") 11:32:13 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 891.705175] UBIFS error (pid: 6324): cannot open "ubi: [ 891.705175] nbd", error -19 [ 891.814104] vhci_hcd: invalid port number 0 11:32:13 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:13 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6c000000}) [ 891.916234] UBIFS error (pid: 6331): cannot open "ubi: [ 891.916234] nbd", error -19 11:32:13 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 892.119515] UBIFS error (pid: 6341): cannot open "ubi: [ 892.119515] nbd", error -19 [ 892.156942] vhci_hcd: invalid port number 0 11:32:13 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:13 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673ff") [ 892.261070] UBIFS error (pid: 6348): cannot open "ubi: [ 892.261070] nbd", error -19 11:32:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000240)={0x3ff, 0x100, 0x931, 0x20, 0x6, 0x400}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0300000000fdae015e524f501545fc069a0d98e40000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:14 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfsH') 11:32:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x68000000}) [ 892.534836] UBIFS error (pid: 6357): cannot open "ubi: [ 892.534836] nbd", error -19 [ 892.576643] vhci_hcd: invalid port number 0 11:32:14 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x100000}) 11:32:14 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 892.879103] UBIFS error (pid: 6366): cannot open "ubi: [ 892.879103] nbd", error -19 [ 893.010720] vhci_hcd: invalid port number 0 11:32:14 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 893.088799] UBIFS error (pid: 6372): cannot open "ubi: [ 893.088799] nbd", error -19 11:32:14 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:14 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x68}) 11:32:14 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:14 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 893.305817] UBIFS error (pid: 6378): cannot open "ubi: [ 893.305817] nbd", error -19 [ 893.353522] vhci_hcd: invalid port number 0 [ 893.430683] UBIFS error (pid: 6394): cannot open "ubi: [ 893.430683] nbd", error -19 11:32:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x101, 0x0) 11:32:15 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7400000000000000}) 11:32:15 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 893.670936] UBIFS error (pid: 6405): cannot open "ubi: [ 893.670936] nbd", error -19 [ 893.672164] vhci_hcd: invalid port number 0 11:32:15 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="6164667302") 11:32:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6c00}) [ 894.018042] UBIFS error (pid: 6415): cannot open "ubi: [ 894.018042] nbd", error -19 11:32:15 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 894.197392] vhci_hcd: invalid port number 0 [ 894.241724] UBIFS error (pid: 6421): cannot open "ubi: [ 894.241724] nbd", error -19 11:32:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6c000000}) 11:32:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x2000000}) 11:32:15 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:15 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:15 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 894.413778] vhci_hcd: invalid port number 0 [ 894.426149] UBIFS error (pid: 6432): cannot open "ubi: [ 894.426149] nbd", error -19 [ 894.441143] vhci_hcd: invalid port number 0 11:32:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0x0, 0x6, 0x9}) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000008001b0034fc44f5f0d3b7909f353e156839a40da02100000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:16 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x48}) 11:32:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 894.658128] vhci_hcd: invalid port number 0 11:32:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x2}) 11:32:16 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfsl') [ 894.713004] UBIFS error (pid: 6449): cannot open "ubi: [ 894.713004] nbd", error -19 11:32:16 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 894.911624] vhci_hcd: invalid port number 0 11:32:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r1, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x1000000}) 11:32:16 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="6164667305") [ 894.966680] UBIFS error (pid: 6460): cannot open "ubi: [ 894.966680] nbd", error -19 [ 895.169603] UBIFS error (pid: 6472): cannot open "ubi: [ 895.169603] nbd", error -19 [ 895.198992] vhci_hcd: invalid port number 0 11:32:16 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:17 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x9, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000240)=0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:17 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7000000}) [ 895.752798] vhci_hcd: invalid port number 0 [ 895.783728] UBIFS error (pid: 6491): cannot open "ubi: [ 895.783728] nbd", error -19 [ 895.799811] UBIFS error (pid: 6491): cannot open "ubi: [ 895.799811] nbd", error -19 11:32:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x74000000}) 11:32:17 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 896.001368] vhci_hcd: invalid port number 0 11:32:17 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6000}) [ 896.047666] UBIFS error (pid: 6500): cannot open "ubi: [ 896.047666] nbd", error -19 11:32:17 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:17 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 896.257863] UBIFS error (pid: 6509): cannot open "ubi: [ 896.257863] nbd", error -19 [ 896.268940] vhci_hcd: invalid port number 0 11:32:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x74}) 11:32:18 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 896.356676] UBIFS error (pid: 6512): cannot open "ubi: [ 896.356676] nbd", error -19 11:32:18 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 896.495155] vhci_hcd: invalid port number 0 11:32:18 executing program 2: keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x4000, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000300)=0x7ff, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x4000100}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getroute={0x14, 0x1a, 0x800, 0x70bd29, 0x2, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000008001b00000000008b68dee831e3678ab3ea32b222c04d18513cbaacdcb5d824d2973cc159d85309badaef056f639e9150f2407a3149d557cfa438b715585900e838e3fb36688b88bed1dcc1ffb96c9d6b4374b3f6fc9e77b81ea66463157f8a884b2112bdd2ac9222701419151a9433059d8bbe1fbbb5bed0e6afc0d5ce1ce02da7738e63473eabfd69bb706dba943c06c935ecb3627d932dd146c802419179d91a9c80de5d507edd4e7e2380718121d260"], 0x1}}, 0x0) r2 = open(&(0x7f0000000400)='./file0\x00', 0x8000, 0x92) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000440)=""/103, &(0x7f00000004c0)=0x67) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:18 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfsz') 11:32:18 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4800000000000000}) [ 896.720708] vhci_hcd: invalid port number 0 [ 896.731527] UBIFS error (pid: 6531): cannot open "ubi: [ 896.731527] nbd", error -19 11:32:18 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x800000000000000}) [ 897.018102] UBIFS error (pid: 6539): cannot open "ubi: [ 897.018102] nbd", error -19 11:32:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:18 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 897.300661] vhci_hcd: invalid port number 0 11:32:19 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x300}) 11:32:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673ff") [ 897.456911] UBIFS error (pid: 6549): cannot open "ubi: [ 897.456911] nbd", error -19 11:32:19 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:19 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 897.683230] UBIFS error (pid: 6559): cannot open "ubi: [ 897.683230] nbd", error -19 [ 897.705017] vhci_hcd: invalid port number 0 11:32:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x200000000000000}) [ 897.801189] UBIFS error (pid: 6568): cannot open "ubi: [ 897.801189] nbd", error -19 [ 897.863073] UBIFS error (pid: 6574): cannot open "ubi: [ 897.863073] nbd", error -19 11:32:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 897.973433] vhci_hcd: invalid port number 0 11:32:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4c000000}) [ 898.151271] UBIFS error (pid: 6584): cannot open "ubi: [ 898.151271] nbd", error -19 [ 898.213188] vhci_hcd: invalid port number 0 11:32:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffff, 0x82080) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x5, 0x189800) renameat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 898.448590] UBIFS error (pid: 6592): cannot open "ubi: [ 898.448590] nbd", error -19 11:32:20 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x600}) 11:32:20 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 898.598893] vhci_hcd: invalid port number 0 [ 898.665251] UBIFS error (pid: 6600): cannot open "ubi: [ 898.665251] nbd", error -19 11:32:20 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:20 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7}) 11:32:20 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:20 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 899.030177] UBIFS error (pid: 6613): cannot open "ubi: [ 899.030177] nbd", error -19 [ 899.048432] vhci_hcd: invalid port number 0 11:32:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x600000000000000}) 11:32:20 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 899.167643] UBIFS error (pid: 6621): cannot open "ubi: [ 899.167643] nbd", error -19 [ 899.312178] vhci_hcd: invalid port number 0 11:32:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xff7ffffffffffffd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4000000}) 11:32:21 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 899.555765] UBIFS error (pid: 6631): cannot open "ubi: [ 899.555765] nbd", error -19 [ 899.703701] vhci_hcd: invalid port number 0 11:32:21 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x8}) [ 899.889123] vhci_hcd: invalid port number 0 [ 899.914964] UBIFS error (pid: 6647): cannot open "ubi: [ 899.914964] nbd", error -19 11:32:21 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:21 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000200)) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x1}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x20, 0x80200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:21 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="6164667303") 11:32:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6c}) 11:32:21 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[]}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 900.227802] vhci_hcd: invalid port number 0 [ 900.237739] UBIFS error (pid: 6658): cannot open "ubi: [ 900.237739] nbd", error -19 11:32:21 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfsh') 11:32:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x60}) [ 900.387978] UBIFS error (pid: 6667): cannot open "ubi: [ 900.387978] nbd", error -19 11:32:22 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:22 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 900.541643] vhci_hcd: invalid port number 0 11:32:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x400000000000000}) [ 900.634311] UBIFS error (pid: 6677): cannot open "ubi: [ 900.634311] nbd", error -19 [ 900.652628] vhci_hcd: invalid port number 0 11:32:22 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:22 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x300000000000000}) [ 900.786008] UBIFS error (pid: 6685): cannot open "ubi: [ 900.786008] nbd", error -19 [ 901.019684] vhci_hcd: invalid port number 0 11:32:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socketpair$inet6(0xa, 0x80007, 0xffffffff80000000, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x9, 0xfffffffffffffffb]}, &(0x7f0000000240)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x2000}) 11:32:22 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:22 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:22 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673f6") [ 901.185509] UBIFS error (pid: 6702): cannot open "ubi: [ 901.185509] nbd", error -19 [ 901.188245] vhci_hcd: invalid port number 0 11:32:22 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673eb") 11:32:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xffffff7f}) [ 901.338954] vhci_hcd: invalid port number 0 11:32:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x5000000}) [ 901.375009] UBIFS error (pid: 6713): cannot open "ubi: [ 901.375009] nbd", error -19 [ 901.473703] vhci_hcd: invalid port number 0 11:32:23 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6800}) [ 901.665555] UBIFS error (pid: 6725): cannot open "ubi: [ 901.665555] nbd", error -19 [ 901.736441] vhci_hcd: invalid port number 0 11:32:23 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:23 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fsync(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 902.122520] UBIFS error (pid: 6732): cannot open "ubi: [ 902.122520] nbd", error -19 11:32:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x10}) 11:32:23 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:23 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\a') [ 902.269151] vhci_hcd: invalid port number 0 11:32:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x3}) [ 902.332851] UBIFS error (pid: 6749): cannot open "ubi: [ 902.332851] nbd", error -19 11:32:24 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="616466738c") [ 902.449869] vhci_hcd: invalid port number 0 11:32:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xffffffff00000000}) 11:32:24 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:24 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 902.533897] UBIFS error (pid: 6758): cannot open "ubi: [ 902.533897] nbd", error -19 [ 902.710044] vhci_hcd: invalid port number 0 [ 902.780305] UBIFS error (pid: 6767): cannot open "ubi: [ 902.780305] nbd", error -19 11:32:24 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:24 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000641a08add6"], 0x1}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x7fffffff}}, 0xffff, 0x0, 0x3, 0x45c5, 0x401}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x4, 0x6}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:24 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:24 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6800000000000000}) [ 903.185630] UBIFS error (pid: 6781): cannot open "ubi: [ 903.185630] nbd", error -19 [ 903.208711] vhci_hcd: invalid port number 0 11:32:24 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673c0") 11:32:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x500000000000000}) 11:32:25 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 903.425150] UBIFS error (pid: 6794): cannot open "ubi: [ 903.425150] nbd", error -19 [ 903.575050] vhci_hcd: invalid port number 0 11:32:25 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:25 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x10000000000000}) [ 903.716188] UBIFS error (pid: 6800): cannot open "ubi: [ 903.716188] nbd", error -19 11:32:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:25 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 903.924463] UBIFS error (pid: 6807): cannot open "ubi: [ 903.924463] nbd", error -19 [ 903.929094] UBIFS error (pid: 6807): cannot open "ubi: [ 903.929094] nbd", error -19 [ 903.953948] vhci_hcd: invalid port number 0 11:32:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000240)={0x1, 0xb7e}, 0x2) ioctl$FICLONE(r2, 0x40049409, r2) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000200)={0x4a, 0x4, 0x1}) shutdown(r2, 0x1) pread64(r0, &(0x7f00000001c0)=""/39, 0x341, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:25 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4}) [ 904.120114] UBIFS error (pid: 6819): cannot open "ubi: [ 904.120114] nbd", error -19 11:32:25 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 904.290767] vhci_hcd: invalid port number 0 11:32:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6c00000000000000}) 11:32:26 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 904.407608] UBIFS error (pid: 6831): cannot open "ubi: [ 904.407608] nbd", error -19 11:32:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x6000000000000000}) [ 904.638487] vhci_hcd: invalid port number 0 [ 904.683156] UBIFS error (pid: 6841): cannot open "ubi: [ 904.683156] nbd", error -19 [ 904.718313] vhci_hcd: invalid port number 0 11:32:26 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x4c}) 11:32:26 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 904.875765] UBIFS error (pid: 6848): cannot open "ubi: [ 904.875765] nbd", error -19 11:32:27 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:27 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="6164667306") 11:32:27 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f0000000380)=""/39, 0xffffffffffffffae, 0x0) rt_sigaction(0x12, &(0x7f0000000240)={&(0x7f0000000040)="0f29ed8fc96892960c0000000f4dae0400000067660f7f05c4e1fd2bb9050000000fc4610000660f380a6b040ff3ddc4e1d9ed84ad00000000c4e1ed71f386", {0x2}, 0x40000000, &(0x7f0000000200)="0d0100000067360fe7990090660f38db8005000000c4c2f9345c490e660f519912000000efd9a5000000200fb0f3f30fc7b6001000000f8a7ed77b1f"}, &(0x7f0000000300)={&(0x7f0000000280)="c4e27d3002660f3a205d02992e0fc2360ac4e27920282ef20f112ff390828cd7ff83745ddf660f5c52bfc4e2e9a800c4e1ffe6465f", {}, 0x0, &(0x7f00000002c0)="c4e19df5f1c4c179288b774611fd1b128fe80886cced2ef36cf2f0834dff1ac4c30d68e28dc4c31d6c6e0b00c4e16d61a3ee930000c4c1bbc2c508"}, 0x8, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xa}) 11:32:27 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfsL') [ 905.650929] UBIFS error (pid: 6868): cannot open "ubi: [ 905.650929] nbd", error -19 [ 905.651701] vhci_hcd: invalid port number 0 11:32:27 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfst') [ 905.737936] UBIFS error (pid: 6875): cannot open "ubi: [ 905.737936] nbd", error -19 11:32:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0xa000000}) 11:32:27 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:27 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 905.901472] UBIFS error (pid: 6879): cannot open "ubi: [ 905.901472] nbd", error -19 [ 905.988624] vhci_hcd: invalid port number 0 11:32:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x700}) [ 906.243080] UBIFS error (pid: 6890): cannot open "ubi: [ 906.243080] nbd", error -19 11:32:27 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 906.455209] vhci_hcd: invalid port number 0 [ 906.546977] UBIFS error (pid: 6898): cannot open "ubi: [ 906.546977] nbd", error -19 11:32:28 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7400}) [ 906.651358] vhci_hcd: invalid port number 0 11:32:28 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2f"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400001) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000200)={"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"}) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:28 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x7a}) [ 906.802827] UBIFS error (pid: 6912): cannot open "ubi: [ 906.802827] nbd", error -19 [ 906.856506] vhci_hcd: invalid port number 0 11:32:28 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x20000000}) [ 907.063056] UBIFS error (pid: 6922): cannot open "ubi: [ 907.063056] nbd", error -19 11:32:28 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4), 0xc) 11:32:28 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 907.132027] vhci_hcd: invalid port number 0 11:32:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x3000000}) [ 907.223819] UBIFS error (pid: 6932): cannot open "ubi: [ 907.223819] nbd", error -19 11:32:28 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 907.441552] vhci_hcd: invalid port number 0 [ 907.562453] UBIFS error (pid: 6941): cannot open "ubi: [ 907.562453] nbd", error -19 11:32:29 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:29 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:29 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x600000000000000}) 11:32:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:29 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 907.811515] UBIFS error (pid: 6947): cannot open "ubi: [ 907.811515] nbd", error -19 [ 907.935263] UBIFS error (pid: 6958): cannot open "ubi: [ 907.935263] nbd", error -19 [ 907.947626] vhci_hcd: invalid port number 0 11:32:29 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="61646673ff") 11:32:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7400000000000000}) [ 908.134884] UBIFS error (pid: 6967): cannot open "ubi: [ 908.134884] nbd", error -19 11:32:29 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)="6164667304") [ 908.375048] vhci_hcd: invalid port number 0 11:32:30 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:30 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x5000000}) [ 908.405811] UBIFS error (pid: 6975): cannot open "ubi: [ 908.405811] nbd", error -19 [ 908.741823] UBIFS error (pid: 6984): cannot open "ubi: [ 908.741823] nbd", error -19 [ 908.775887] vhci_hcd: invalid port number 0 11:32:30 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:30 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:30 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x1b, 0x1, 0x11000, 0x100000001, 0xffffffff, 0xfff, 0x100}}, 0x50) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000300)={0x18, 0x0, {0x0, @dev={[], 0x15}, 'veth0_to_bond\x00'}}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000200)=0x7) ioctl$RTC_UIE_OFF(r0, 0x7004) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:30 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x8000000}) 11:32:30 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 909.047835] UBIFS error (pid: 6994): cannot open "ubi: [ 909.047835] nbd", error -19 [ 909.104416] vhci_hcd: invalid port number 0 11:32:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x2000000000000000}) 11:32:30 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 909.250967] UBIFS error (pid: 7008): cannot open "ubi: [ 909.250967] nbd", error -19 [ 909.368869] vhci_hcd: invalid port number 0 11:32:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xa00}) [ 909.509573] UBIFS error (pid: 7015): cannot open "ubi: [ 909.509573] nbd", error -19 [ 909.528979] vhci_hcd: invalid port number 0 11:32:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x8000000}) 11:32:31 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x8}) [ 909.831426] UBIFS error (pid: 7023): cannot open "ubi: [ 909.831426] nbd", error -19 [ 909.834884] vhci_hcd: invalid port number 0 11:32:31 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 909.950207] vhci_hcd: invalid port number 0 11:32:31 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "216fa96582d78c34c0c7b2ce0c2ec057"}, 0x11, 0x1) socket$nl_route(0x10, 0x3, 0x0) [ 910.092226] UBIFS error (pid: 7031): cannot open "ubi: [ 910.092226] nbd", error -19 11:32:31 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4}) 11:32:31 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:31 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 910.363883] vhci_hcd: invalid port number 0 11:32:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x100000}) 11:32:32 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 910.555475] vhci_hcd: invalid port number 0 11:32:32 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:32 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 910.584803] UBIFS error (pid: 7058): cannot open "ubi: [ 910.584803] nbd", error -19 11:32:32 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4c000000}) [ 910.773320] UBIFS error (pid: 7068): cannot open "ubi: [ 910.773320] nbd", error -19 [ 910.834734] vhci_hcd: invalid port number 0 11:32:32 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:32 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6c}) 11:32:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x1, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000240)={0x0, 0x0, 0x10003, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0086438, &(0x7f0000000280)={0x23b3, r2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000340)={r4, 0x44, "ab395826cdc1696cb4a65475f6abb23d9a7f30e9b7e863b8216d192e18c13b25d6001043484381325f2a4316f39387b3d94e7694ea1f2e5d93ea31891c8dca5ed32d07fb"}, &(0x7f00000003c0)=0x4c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 911.134595] UBIFS error (pid: 7075): cannot open "ubi: [ 911.134595] nbd", error -19 [ 911.382728] vhci_hcd: invalid port number 0 11:32:33 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:33 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:33 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7000000}) [ 911.817719] UBIFS error (pid: 7087): cannot open "ubi: [ 911.817719] nbd", error -19 [ 911.833235] vhci_hcd: invalid port number 0 11:32:33 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:33 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:33 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x68000000}) [ 911.908804] UBIFS error (pid: 7098): cannot open "ubi: [ 911.908804] nbd", error -19 [ 911.975246] UBIFS error (pid: 7101): cannot open "ubi: [ 911.975246] nbd", error -19 11:32:33 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 912.074858] vhci_hcd: invalid port number 0 11:32:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x700}) [ 912.157149] UBIFS error (pid: 7112): cannot open "ubi: [ 912.157149] nbd", error -19 11:32:33 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 912.330049] UBIFS error (pid: 7119): cannot open "ubi: [ 912.330049] nbd", error -19 [ 912.443565] vhci_hcd: invalid port number 0 11:32:34 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) getsockopt(r0, 0xb8c, 0x6, &(0x7f00000000c0)=""/92, &(0x7f0000000040)=0x5c) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 912.679982] UBIFS error (pid: 7123): cannot open "ubi: [ 912.679982] nbd", error -19 [ 912.684071] UBIFS error (pid: 7124): cannot open "ubi: [ 912.684071] nbd", error -19 11:32:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe61, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) r3 = getpgid(0x0) setpriority(0x3, r3, 0x4) ppoll(&(0x7f0000000040)=[{r1, 0x80}, {r1}, {r2, 0x200}, {r2, 0x80}, {r2, 0x1070}, {r0, 0x2}, {r0}, {r0, 0x412}], 0x8, &(0x7f0000000200), &(0x7f0000000240)={0x7}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x2000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:34 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4000000}) 11:32:34 executing program 0: socketpair(0xa, 0x5, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/28) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) sendto$unix(r1, &(0x7f0000000240)="d18e130d1e2f6affb31560ca96adee32215727d7c67a54cd1e0bf59cd561c8f6c3fb790a5ca8b9455e8fa5ab930d6ee58bc6636fc62aa3394879f1e8014ea366a6ce7369ba76b9513bd67b20f6f5effc7f68cd06ef39903d554de2527c30e421f2fb76b17ccd3ab3eb8fc5ef824e3c851afc73ea0a16e576bf830e806140b57094871492c50eb13ddd54326af783f92265d33d5a078e7285ad966b49b33346af3466b92f44386819a1528d2d", 0xac, 0x0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="da15ed11322830ecdf96b6a7efebf863236fc0a2bede653bffd0ebbfa9e4c9129e9fee0120e784af"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:34 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 912.993189] vhci_hcd: invalid port number 0 11:32:34 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 913.030222] vhci_hcd: invalid port number 0 [ 913.031588] UBIFS error (pid: 7139): cannot open "Úí2(0ìß–¶§ïëøc#oÀ¢¾Þe;ÿÐë¿©äÉžŸî 焯", error -22 11:32:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x20000000}) [ 913.102264] UBIFS error (pid: 7146): cannot open "Úí2(0ìß–¶§ïëøc#oÀ¢¾Þe;ÿÐë¿©äÉžŸî 焯", error -22 11:32:34 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="057a9d8cffadc3d202331da24f81c56b286788f823fd8dd815afd2fc4c89a398c3ab3483e52a467bd6ac777316a60ef6d425002560428df1ba4d8593"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x0, 0x1}) [ 913.180212] vhci_hcd: invalid port number 0 11:32:34 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x2000000}) [ 913.308062] UBIFS error (pid: 7162): cannot open "zŒÿ­ÃÒ3¢OÅk(gˆø#ýدÒüL‰£˜Ã«4ƒå*F{Ö¬ws¦öÔ%", error -22 [ 913.310736] UBIFS error (pid: 7162): cannot open "zŒÿ­ÃÒ3¢OÅk(gˆø#ýدÒüL‰£˜Ã«4ƒå*F{Ö¬ws¦öÔ%", error -22 [ 913.406065] vhci_hcd: invalid port number 0 11:32:35 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x64, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x68}) [ 913.702599] UBIFS error (pid: 7168): cannot open "ubi: [ 913.702599] nbd", error -19 11:32:35 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2242, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0xc000, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000540), r1, 0x1}}, 0x18) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)={{0x8000, 0x81}, {0xffffffff, 0x7ff}, 0x1000, 0x1, 0x5}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="7562693a0a6e0900000030b0be666162824798fcce24528e7326e7ec91c33cc56955422a843fed99bdd61134216affcf990c2b005d87edbe7f0a33dd25b53d862a2f99937fbb06"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 913.924701] vhci_hcd: invalid port number 0 11:32:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200)={0x5}, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x29a000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 914.059152] UBIFS error (pid: 7174): cannot open "ubi: [ 914.059152] n ", error -19 [ 914.077349] UBIFS error (pid: 7175): cannot open "ubi: [ 914.077349] n ", error -19 11:32:35 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:35 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xa}) 11:32:35 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:35 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f0000000080)='adfs\x00') 11:32:35 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 914.360263] vhci_hcd: invalid port number 0 11:32:35 executing program 0: open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x4) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x200000000000000}) 11:32:36 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000280)=""/127) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) read(r1, &(0x7f0000000340)=""/223, 0xc1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x801}) read(r2, &(0x7f0000465f8e)=""/114, 0x72) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x100000000000000, &(0x7f0000000100)=0x1) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r0, r0, 0xf28d, 0x0, &(0x7f0000000240)="7625a10e202654b1", 0x101, 0x3, 0x3, 0x5, 0x1, 0x940, 0x80, "6d30bed40606bf621f01fa9aac5b45f9cba549d96c18c9dac69c0266c3287511880a8950aa7c36866a2fc11ce3cf57954c5267754f3b945149857e34d662c7490cdfa7695c4fa3c3240de8438e821e988ac2f5b110d2598370c68232556df5300bddb7acb2259ea6ee07f18ac790a954bfff844a6404369c6314412978a1f8b5817fcc9a753615e54977abee873dbae98d238e95f89a3a327af7e01f59bcc0b8ef833622723cf0653bcf2f264bf126ebd67b4a05dc582101cc0394383200982ff8e5c218a69813138d11a52010da966495b55feb"}) [ 914.471329] UBIFS error (pid: 7199): cannot open "ubi: [ 914.471329] nbd", error -19 [ 914.496091] vhci_hcd: invalid port number 0 11:32:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6c00000000000000}) 11:32:36 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 914.643497] UBIFS error (pid: 7212): cannot open "ubi: [ 914.643497] nbd", error -19 [ 914.658868] vhci_hcd: invalid port number 0 11:32:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6c000000}) [ 914.958407] vhci_hcd: invalid port number 0 11:32:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6c00}) [ 915.390891] UBIFS error (pid: 7212): cannot open "ubi: [ 915.390891] nbd", error -19 [ 915.574664] vhci_hcd: invalid port number 0 11:32:37 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:37 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6000000}) 11:32:37 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x3f, 0x4) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) [ 915.705332] vhci_hcd: invalid port number 0 11:32:37 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:37 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x60000000}) 11:32:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9a, @dev={0xfe, 0x80, [], 0xe}, 0x1}, 0x1c) [ 915.965115] vhci_hcd: invalid port number 0 11:32:37 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x10000000000000}) 11:32:37 executing program 0: rmdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="7562693a0a6e62640000a48bcfc949fbba40f68b66e4fc50167f7b229cd10845bdae9bd6bd2c7ce238ea"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:37 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 916.230513] UBIFS error (pid: 7265): cannot open "ubi: [ 916.230513] nbd", error -19 [ 916.239115] UBIFS error (pid: 7266): cannot open "ubi: [ 916.239115] nbd", error -19 11:32:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6800}) [ 916.615718] vhci_hcd: invalid port number 0 11:32:38 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:38 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="d0bf2f72f7014a74b5e6555d27e590756200000000000000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)="756209666eaa", 0x0, &(0x7f0000000000)='adfs\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 11:32:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x500}) 11:32:38 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 916.850341] vhci_hcd: invalid port number 0 11:32:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:32:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x2}) 11:32:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r0, r1, 0x80000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3ff}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe8, 0x40c002) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000001c0)={0x100, 0x80000000, 0x4}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x40, 0x20) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f0000000200)) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x594, 0x3f0, 0x0, 0x3f0, 0x3f0, 0x210, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xbc, 0xe0, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x2}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x11, 0x8000, 0x2}}}, {{@uncond, 0x0, 0x10c, 0x130, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x4}}, @common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x800, 0x8, 0x6}, {0x211e56c5, 0x80}, {0x2b, 0x1000}, 0x6}}]}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@ip={@remote, @rand_addr=0x9, 0xff, 0xffffffff, 'rose0\x00', 'eql\x00', {}, {0xff}, 0x0, 0x3, 0x9}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x4}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x100, 0x20, 0x0, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x50b, 0x7ff, 0x81, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2ea2, 0x6, @local, 0x4e23}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x24, 'rpfilter\x00', 0x0, {0x6}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x0, 0x3, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0xfd34, 0xffffffffffffff60}, {0xffffffffffffff01, 0x5, 0x5}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x5f0) [ 917.057357] vhci_hcd: invalid port number 0 [ 917.073512] UBIFS error (pid: 7303): cannot open "ubéF [ 917.073512] nbd", error -22 [ 917.074970] UBIFS error (pid: 7307): cannot open "ubéF [ 917.074970] nbd", error -22 11:32:38 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x3}) [ 917.211721] vhci_hcd: invalid port number 108 [ 917.245051] vhci_hcd: invalid port number 0 11:32:38 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYPTR64, @ANYPTR64, @ANYRESHEX], @ANYPTR], @ANYBLOB="ada845ad3fc075ba13d41ae7fe6cd0e47cc746e1cb775c748e838bc158e5b0144f94ab4a8a3dec9e8dfc5b9cc5e1d6594182995b4fede5130813582d7522b5e294e04661a65052a27e68bd0c31cdd778503618fab4acf84c78d8d1ad41a2ec8ff74f534611cecf89d19e20f8e9f87fcc1fb954d7b83c034b80e38bb84174d3cd113e00ef61b83750ffc9531bf3a8070f5be3eb29784921d639dda1deebcf0577420a7f6c656780347dbd64ac73d6f696118331eb73d1eaf632cbdf2a8f29e623d0edec191e2c369a5c63a427418ea27bbda5f32e030355", @ANYBLOB="b822d9869698de911e0f43ba", @ANYRESHEX=r0], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hfsplus\x00', 0x0, &(0x7f0000000000)='ad\x00;-') 11:32:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:32:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x60}) [ 917.614233] vhci_hcd: invalid port number 0 [ 917.625861] vhci_hcd: invalid port number 108 11:32:39 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:39 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x2004, 0x800) 11:32:39 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x700000000000000}) 11:32:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:32:39 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') statx(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x100, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x6a49, 0x200, 0x6, 0x6, 0x80000001, 0xff, 0x2389, {0x0, @in6={{0xa, 0x4e22, 0x3, @remote, 0x1}}, 0x9, 0xffffffff, 0x5, 0xfffffffffffffff9, 0xffffffff}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x100000000, 0xa, [0x0, 0x80000001, 0x4, 0x5, 0x9, 0x8, 0xffffffff, 0x2, 0x6, 0x2c5]}, &(0x7f00000001c0)=0x1c) [ 917.837735] vhci_hcd: invalid port number 0 [ 917.852164] vhci_hcd: invalid port number 108 [ 917.886680] UBIFS error (pid: 7339): cannot open "ubi: [ 917.886680] nbd", error -19 [ 917.889659] UBIFS error (pid: 7339): cannot open "ubi: [ 917.889659] nbd", error -19 11:32:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)={0x4d, 0x40, "3dc75d40fa67a47f0b3383e1e04553fb17ae8f849b2a98e82c1463d70cab366b7368825f8491fc4228dcbfaefc48be030a4842621d579d2b2ce1230dba5d062d69744c6e26"}, 0x10000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x109200, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000240)={0x8001, 0x9, 0x200, 0x3}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2000, 0x0) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x74000000}) 11:32:39 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x2) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:39 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) [ 918.133667] UBIFS error (pid: 7355): cannot open "ubi: [ 918.133667] nbd", error -19 [ 918.134779] vhci_hcd: invalid port number 0 11:32:39 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) [ 918.429859] UBIFS error (pid: 7364): cannot open "ubi: [ 918.429859] nbd", error -19 [ 918.431286] UBIFS error (pid: 7366): cannot open "ubi: [ 918.431286] nbd", error -19 11:32:40 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7}) 11:32:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="030000000000000008001b0000000000714d5616f4f06aeb82f00389ee134fc8fe26ec0fc0b5868c04706f84d6db5fa56851157354c4835285228f9612a8327fc4214255316bc9c67e0cb3437ed45f5647ec555c7db6d3d130a3d9fd2c8d6f733c2614d23ece1284f1dfe24d0dc384c2580388de8168c3b8556ba509168238623bc724bcd2c2df2d6946fd2ac18c8385001cbe0ec2ec5c81b3b873635b218f3795288aad61214177ac9ad2acb2"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:32:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="7c47d06f68ffffff1d5d"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:40 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 918.777317] UBIFS error (pid: 7380): cannot open "|GÐohÿÿÿ]", error -22 [ 918.792465] vhci_hcd: invalid port number 0 11:32:40 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:32:40 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='ub}:\x00nbd\x00\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') r1 = getpid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x40) syz_open_procfs(r1, &(0x7f0000000200)='net/unix\x00') ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) 11:32:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x400000000000000}) 11:32:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x6c}) [ 919.018261] UBIFS error (pid: 7395): cannot open "ub}:", error -22 [ 919.049509] UBIFS error (pid: 7395): cannot open "ub}:", error -22 [ 919.075275] vhci_hcd: invalid port number 0 11:32:40 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="7562693a0a6e1d0d6264ac2151b0b8bd76f572399c80330fd56d863d4239ecc5433f1b7d5cb5f4de2ac0e6d990c42557d0907e4ad4e07071f079481f89a111fd6bcd92f8eddff34bdb137773e3635632e3053c8473fb4320b84303fdcd0a39741b6d20ed70b75c65225214e4b61d5db4d87a24d8f4ac2c7134072dd87b5e87b7f1680f3f03252671d0a6fa3e9b9b7ca69ae6d227a20e86bcdfb2cdeef42a6537c4d365"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) [ 919.288347] vhci_hcd: invalid port number 108 11:32:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xffffff7f00000000}) [ 919.337229] vhci_hcd: default hub control req: 0000 v0000 i006c l0 [ 919.482654] UBIFS error (pid: 7407): cannot open "ubi: [ 919.482654] n bd¬!Q°¸½võr9œ€3Õm†=B9ìÅC?}\µôÞ*ÀæÙÄ%WÐ~JÔàpqðyH‰¡ýkÍ’øíßóKÛwsãcV2ã<„sûC ¸CýÍ [ 919.482654] 9tm íp·\e"Rä¶]´Øz$Øô¬,q4-Ø{^‡·ñh?%&qЦú>››|¦šæÒ'¢†¼ß²Íîô*e7ÄÓe", error -22 [ 919.490309] UBIFS error (pid: 7407): cannot open "ubi: [ 919.490309] n bd¬!Q°¸½võr9œ€3Õm†=B9ìÅC?}\µôÞ*ÀæÙÄ%WÐ~JÔàpqðyH‰¡ýkÍ’øíßóKÛwsãcV2ã<„sûC ¸CýÍ [ 919.490309] 9tm íp·\e"Rä¶]´Øz$Øô¬,q4-Ø{^‡·ñh?%&qЦú>››|¦šæÒ'¢†¼ß²Íîô*e7ÄÓe", error -22 [ 919.535434] vhci_hcd: invalid port number 0 11:32:41 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3}) 11:32:41 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4), 0xc) 11:32:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0x1, 0x6, 0x381}) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x1000000}) 11:32:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x4, 0x2a, 0x100000001, 0x6, 0x0, 0x7e00, 0x20000, 0x5, 0x7, 0x3, 0x4, 0x2, 0x1, 0x9, 0x0, 0x1ff, 0x8e, 0x8, 0x289, 0x8, 0x8001, 0x40, 0x7ff, 0xfffffffffffffff7, 0x6, 0x6, 0xff, 0x3, 0x401, 0x4, 0x7, 0x7, 0x100000000, 0x6, 0x2, 0x80, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x1}, 0x4140, 0x3, 0x0, 0x4, 0x8, 0x7f, 0x4921}, r4, 0x4, r0, 0x1) [ 919.740568] vhci_hcd: invalid port number 0 11:32:41 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe8"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 919.760800] UBIFS error (pid: 7421): cannot open "ubi: [ 919.760800] nbd", error -19 [ 919.762612] vhci_hcd: invalid port number 0 11:32:41 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x2481c1, 0x0) mount(&(0x7f0000000040)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7400}) 11:32:41 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 919.939351] vhci_hcd: invalid port number 0 11:32:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x10}) [ 920.086066] UBIFS error (pid: 7450): cannot open "ubi: [ 920.086066] nbd", error -19 [ 920.112231] vhci_hcd: invalid port number 0 11:32:41 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x300000000000000}) [ 920.450767] vhci_hcd: invalid port number 0 11:32:42 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r3, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4c00000000000000}) 11:32:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x10}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x7efffffd, @empty, 0x400}, 0xfd9d) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5, 0x40) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000240)=""/16) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe8"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') sendmsg$nl_crypto(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x9, 0x70bd26, 0x25dfdbfe, {{'ctr(aes-aesni)\x00'}, [], [], 0x2000}}, 0xe0}}, 0x81) 11:32:42 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 921.101347] vhci_hcd: invalid port number 0 [ 921.106379] UBIFS error (pid: 7463): cannot open "ubi: [ 921.106379] nbd", error -19 11:32:42 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xa000000}) 11:32:42 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000001240)="1d3736dd7847fde5f8097a08143d0d1051488f69d46411888d800ed44d532a51a2e739efef43e93f6e47ada46d8e3afe3a602bc766826f2edf59c2da7b23c9e6dfd4d360488e8d599803d2b9e8c3499f2a6161f34684c4c97c53c40039482b48e77d0a238f9389d9adf8793454db146537b9edbfb3e5557b89a0d5eba8e37d0bb6e13c8cceb98ef789e88bd437a09778191f0cd478343b251d49285d23ec555d028ed87cc06b757ed80e458e9b36b011d6d8591636adaa2d881b9017e209d6039ca6da4fd5d9cc4cffb2") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='oom_adj\x00') ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000240)=""/4096) [ 921.108186] UBIFS error (pid: 7471): cannot open "ubi: [ 921.108186] nbd", error -19 11:32:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 921.241889] vhci_hcd: invalid port number 0 [ 921.302987] UBIFS error (pid: 7489): cannot open "ubi: [ 921.302987] nbd", error -19 [ 921.304845] UBIFS error (pid: 7489): cannot open "ubi: [ 921.304845] nbd", error -19 11:32:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xffffff7f}) 11:32:43 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000200)=0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @ioapic={0x10000, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000280)={0x4}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x67, @broadcast, 0x4e23, 0x0, 'nq\x00', 0x4, 0x80, 0x67}, {@rand_addr=0xaa40, 0x4e22, 0x6, 0x0, 0x10001}}, 0x44) openat$cgroup_ro(r3, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 921.648908] vhci_hcd: invalid port number 0 11:32:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4c}) [ 921.775471] UBIFS error (pid: 7501): cannot open "", error -22 [ 921.956158] vhci_hcd: invalid port number 0 11:32:43 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7a}) 11:32:43 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400405, 0x2000000) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="3fdba48d83f13c01f5d4437562693a0a6e62640000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 11:32:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008000000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11:32:43 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:43 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:43 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 922.364742] vhci_hcd: invalid port number 0 11:32:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xa00000000000000}) 11:32:44 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="7562693a0a6e627a0000de74eee09da118e617f4282bd837706f06df1cf66a7e5b5bd34fe75a478e41cd136494fac32bab3efbcd57ec85358c68cdf1e0187e44bd4c58b029343e3ed6a0734e296eb69abe3c1d10b1550378"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 922.540695] UBIFS error (pid: 7535): cannot open "ubi: [ 922.540695] nbz", error -19 [ 922.620492] vhci_hcd: invalid port number 0 11:32:44 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x20002) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180)='ubi&s\x00', 0x0, &(0x7f00000001c0)="616466eff073987300") 11:32:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7a000000}) 11:32:44 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x44, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 922.989241] vhci_hcd: invalid port number 0 11:32:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7a00}) [ 923.187486] UBIFS error (pid: 7549): cannot open "ubi: [ 923.187486] nbd", error -19 11:32:44 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x46, 0x180) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000000c0)=0xffff, 0x4) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) [ 923.395793] vhci_hcd: invalid port number 0 11:32:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x9, 0x6100) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000300)={0x2, r4}) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r5 = dup3(r2, r0, 0x80000) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000200)=""/87) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000384708001b0000000000"], 0x1}}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r6, 0xc, 0x3}, 0x14) 11:32:45 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x300}) [ 923.520510] UBIFS error (pid: 7555): cannot open "ubi: [ 923.520510] nbd", error -19 [ 923.521958] UBIFS error (pid: 7556): cannot open "ubi: [ 923.521958] nbd", error -19 [ 923.660720] vhci_hcd: invalid port number 0 11:32:45 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:45 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:45 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 11:32:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4800}) 11:32:45 executing program 0: setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x1015, 0x3, 0x2, "538572aa0a4e87fbb6968715a12a5fa1", "8f3c8d31664fdc27ddcc4080eb9d6a79b02e3a40dc6fefec31259673b5108d3400a2a1153756ae1fbd521b92409a6d31f211b907f083495d63c3ff140dd8b81c8e37c70ce50b84b63766d5bdce4e9666bcaa0ed1c484347dc97a47d1d2c0924ff4cba2402c16598cf63b5248ee448ddb1f32e46ca5b8f158a97bff2aa75661f3770b685369d410a6e3c179b9e567f7d43ce0ca8b08ab8fedbaac60342dca4c5576fa13cfb87e841ea2cd1c086dcafc439db721fb4e3a62e2e9083586ac216b23afacc8684cfb0170da26102ab1b0e3f49f7cf334f513c42ba79407d124192b16bfe26fb0223e756f3f977bb430579a8b896531504cb22b886cd181c77f1332925c131e5977f5b25055c333b1dbb5a5ec6d9d9767a72607baa65c8df39f3db67784bad49547a2e8bc27c7f1fc4fb05219bfe1b05b63419b41f481705f00dfb8f853537d522292d0625590f1b1666f4e7287c03815deaeccc358ccf579f3377bd8a52b16db93e5561d0c90a566d8eb5a2b9c338f1ea46576ff701a89345aa2d90ef25fc5b02b25b1ba5b2f14b444f942cc8e61c6f5abf99a5df1ca65beb27bfa4f21757d222c3b0fc9ddab1ff9f00192fed94b0f27f54d941b5fb67b051641e81e65dd4017c8c4d9531ade3c84944c796cf438d55e9d4e523ff9580a824d42bc55083712cc92a927e502d75d610bdfed02fd53d5592025aa77fb2c5eaddfa86e669ecdda47b2892b629f5ed85306bb5ac97d50703abd46b8f24a8b4cb8bd99e4b2d9c176b4c1537240ee28994bd727bbcad2d04717478c35413c0ea05b12a4ad507d1e4c4a08a7f0206a0ad7505354642aa35ea2044dd9295878f7ba5153daebdeae15f29f65bad5aa90994de1175eb12c07e06cf24a82d28743a3045a76651f5bce3d49c674538433528cacc9cfc8d4cc1fac67b6347483147e5b43228dfc15d003566dac0030b0d2c3c787340d48e1b6fa2f4742a660b8d843247df2b9825186ca7c8b3c3d4ed98b56b2ff6a4aa31d08504a49e6d0ba1d83ce1a08e4dbf640f0785d8b3e33aef435017312f0e94517f936d3c31b782296e292620c8b2b573564fc11238dd7a4434c441735cb77dceb0c1ebfc82981156c156ad5e5847571de097546b9bd36beb793195ab5fe69a18e832fccf66bc7867f19d5f5fabe65033e7aad42806a56bcfb74d8b7c3d1b3ad2f36b6ae6f99fc332f5df2ecd1566385e6c13ec2b819faff297e1baca99606f9c6587b457c99c66c757c071d8cec1ecdd536e6db76b395333ef94f34a0530bc97ede3c7f98ad08109478b5c2ebada887c1271f9cfe894804d7d9a56f0da992dc6e9d913c6b4c5acdf4099eb9417b6b882187e2100bda27fc7ec569e88b55dd13aeedba599b30a1b34e4aa5dfe7590c24b1106816fb750b827479b2e3ce4cdd1dc2ce513e523638ce0be6006631c46be394386fb4f6ef5687eb748eb25bfc8dbd560faf0c3819da6cbfa303c01d4b0d5ffa51e95fd791ee5b6986f3a75a7ad1eeded3414ba4570b88fdb0eb23dd034126f697ba41988815ef6c81f13356059d52053ccd829ba08f0134f7a13665a27a2114ce0391f522232895cfbcca3fd811be4e6311affc7560b2f274096864662feaaba01af2fa3eed38ad64a4a0696414d998a8062df3bd3fca747b07f090b2f7b819fbfd89c9a154f930ff838c133e010db26486c2a04c62725c4fd05fc161847dba1db283dbd1072f7784a2eb9a58da1db528674e03555cf984c1696d4302bafd6f7d2b03200f8326e6a0d652a9b622e0f0d0bccfcc2fea8e97f3d5f6055c49f2eec624bfea5267e9a0cfad889a3e0d4d9a8f68b6f69d500f602f980ba4157fde44208b3b487567b3f71656032a67ee2a684b9b3345a84b0bdf37a1fc8b357011de5630cd8ad70500befe23fe14c648591f2c6a7d5d11aaacd1fee4fdbe815dd3b6024df00f7245d34e780fd601dc7e662e328dccba76378f3d00a4a14fb54af0c7c4a9cb6c333317450bcebf67ce07be6eda6c105dc1c56c5283599e5ece67525445eb8698497a3b3f4c33cac1436027efd0aa6c23c5d4845722eb55e376c4e7cef0273edb9a4b8cf078fb7af5c75a4bd636622f1ca23d7cab7fa12fd8b926b0539b03dd0198899bf3d3f609c14fcb39dcacfcc4b02820189f9c63c2ff523ee308106dba581534c2673c63e2a09738b7908002900c44205bf23f88ee0306c72ed47c9f73901e9aced5ca18246082292dcbfe7a266bea29b6fd9df63d5c378c9f3ad06296a8512ac084911b7048685332df30948204c2a511e7be6555c37fa9dd928ee0616db399962060b040fa4b3fb3e2660f860ae9df047751382c210e3c79b71791655da8d1a01631a7fe1b20a328c3090f4e2278bb31c8312facc3a8f4fe55281c059973b131ed43b6b0a4fc206d8f21c78726274bae32e083986d3c6574f5f3619f8e46ee6a5313ed2b2df535124be09f24b33b4d3e00fae160e025b105ebf0285d6e09daebe1501f0b94ec93bf5959c9f69b4063fd17fbc386bcb907e535d936c56505225118232976010060f0478ed20d06bb889111389b24432415f2d44303de61137397df952a2347de247c573bcaa3c9ed171e903e385c261a7f98aaf6029a36ef100f57d4f09ff47f187c70f79f2fc693e0c1b35a8820cc915b42f804f07ed56bab46e09446ff93d0cc436cfa44d7febdc2f9c6b96b5455792a83d46da157fc729dd71bcd5463940f39a4c5534bd70da9b4b0d8b82d32348b31817ff4d6992628797930ec2f43720b01132ac0a67917441f832fd241753201d0d76fdd12d7fa6bfb992741b78575eca293a783bf1b16c6d62b6af7b43ce178e5fcd6f5ab0b57e7539249cfb9482ee8e41fe05801861e33762d6e3aef7ed9fb3fe70444e06140167ca34a4bc585ca1de0f7b5df46598b3a8a797304790cedc5e82fe06fcdada85248780a0db291eb9d6feb29377320809f901e1781c503dd6d8f77175a19cb3b52880bf28648f9abf1545b45a6bab3c35607b0acbb97eff23262208cddb1f844fa5547fe173c28b80449ebc2fb94fcc3f5c69e8569834a065bffa1c00c6ed4f5988b97c4deddcbd67ea7f5814e940d4225289b74110bb19a20af747527eaf32838693942f328769b87be11b21477db5ccc3960389542f2c31be993a10b22132db0da40e3df123cc071b5b23d7e631cc1d97072eb606ed894b16559ab38e81dc4e767ed5d12f6d05c84a0a906e643ce8412181cc3797b7df122e63948fd5e9af9d065647025eb937bfa69ce09cccb06898bc4ae84cde333c12f91d6eb167ed59f79a4dd8c602fa70123d8340f809380e9f5914973eb6e93b79da35bdc5194e12a5b8b716e378c59ef702ce8d1e051b40c9f50a006b50d05b2b3d789357b6c20b9e5a71fd3d53298f05223aaaf5eebb8b4cc8c6780993b804dcdf71e2ec5daf60f368da633b08dca292ad756dc8aaf38c20db71cd6fc3a03e6561751ec84e8cafc53357f6f64b00030b29d206c1457b08708fa1d93cb13f408f6c9b715a2934c4607121af57e95d6c3905f558ee6e220d0efa9a1f94e3467b5eaf48920dfd6608e5eb08b4040c303e7ce562badf60ff6c778983fa58b452a5c8e061f9edd7f6af6fd8c4909f3bcee89f23611faef7675de19539436b29a1d954bd2d8ab1ca3c6728425ecf03b53581f63c33959ab32959c76a40fd5419d111fe720ae29bb8ceb673d88da182d349d7b9bbd83b3ddd8b315a089faac5db566552e58312db14292ca88439aebcb3bd72293aa8c697cd4f75a435f1b234de1205ed88104197c0c940bfc459675322b271ebdb92056a1e65b959f55a428f9b36a38b8a2efb1f656eb8b4b18a9a31ef6e5f53ab15cf8a737ab210303e13b0754a33393d329fe1e0d9babdd50f834d0f4ccf952e28cb3aa9e56410da5988378c99b31c2311f61fdbbd8b95c876d7fd6190be65ce076d7b4ec1885b7fa259c4cf25e239742cb5397ea382e31b1db32cd01e0b11b9fb83415b8db36305dc4df4be5800a7286d81d1c03a325b959367449ee5a8e4afe0f570e39649fe3f7104d5e13e70a85bd6e7142c9f67c03630221cb11f995bf9126946d8910fe80594c5494aa25c062d505801278d2837a04f91f97f13160befd62fdf9b8cc1d8f37c768cffffc06b46a96a3e8517470fe20eb7c53f4e343360d9184adfdf6899c45b981e4c6e2c4c1189572eb8310b72011c4dbb552a3db65a073d003aa628adceb1e5fb023a898ccc4e7d764c8f091c823d7b76d9f44f6563d8388e9d6c1683744d09270504199f07011518ea0ae8dcfb3d9491043f2c509190eaa11367de570795d6abada0061fdaecdfac07ee86bbb376a8a4d4c2311c1b7aee0aa487141294e44a646c20ad67bd2b55bc761fee3494a53437421a91069c815beff3dd393cf5a5284a9b0a44582d31eee2e6fc8c34f6e38511061fbb561b06b648138906f1543088d66f56e889cdf2f0314d7800e8aca623f10823318f673d0f5f78857ebd70f3bacb9b4867d3397a87ea1bf2a51437c2703bb281e60c9edc341d67deeea140ef52d196413ca63e5364d1198653312775ee6b681417e8145cc724b9f99b0401abd22911ba7d23397ce25129575ebce76d6ea9b88463c43592e63ab5b2233f0e44724988dfd1d785b56ff957de2beaecdba03be976eff5211c7b338e9364de273dcd2fd7b7baa68f8cb0400fcc1c8fd1a1c7c60a0d03b1359a675316c9fec6f9c7271def17fb6e4eab5ccee46f44f912283149b12bb5cb908865ff91da30c89e1cecb0c10526b41892a1379d7f6301b3dda299eb4970026f8abd2db47f47fbd750b84436f8592f82d03034eba67c121f175d58e47a78927541444bbf00eb06c4fa9ae25908ca59fce90edf89bae10450d83849b1442d17b42efb7b8065e0e4854c98616a332a31d385f060acdfaf14d1730c13f13fad35c8979a4d62196e68d5ecbf390db42a35387c6deeb1d2313b53a3a5413c37c66cf9595c7dddfb3042295dfa6e9978ffba6d9fc16b51fcb2154dc609a187cd1342a09df03fc8b077e04674f9ec9a15c3017e884b23648a1565fa74f9125a056e14bdbc9ceae63879db31c7acda009389c00fa300b3d21fd68104653e01023e7d6f367739fa3afae2b9462b4f465dcacacccca5a14ffa8aa72c0632adf0efed65c854f333b49f7bd67a978a895049f1694aff4f26c51c3b2afb728ff59d067804649a70ead4bc0fb91106597bc97981e235cdcb0dba6bad357fbbf921ecfcea1f66eb58d902acc2e7d6b98922d353f5ac5a599311d2680c9ae7d80a5dae712589454899ce13f9b3c0f3455a496b7ad9b96b38b8d8e7c573021b0f09ddc76c4f33817237dbd674209fa22f0e7f3089a40affd781436860830f6804a989ace08f859e96a1bd293a30ae02f4a0979ff2c4634196157f19c61bf19f6624e051f0b1fde75e45acf51cff9e1711cc9e1accd7289781901dc63244e55148a061555e6457cf52e5ddc666055ed4c576bec6e0e405f314a67081d856d5df94e66728cd3dcffbe947d92fe35f58de69c36275a8aa93e54505434380bbfba82c6f50835d4da2aed566924d8f1b0224c2999dd4a501d6431ff74fcf440108db3947a33cf53f5d72be23baaf849c65d38c98a9f2f2239e28098c8076821fc49bb46c231e2cc4080be506c0c641b0087238804e9496da451c2578ceb9ba75d5d00aa2b33de5e37c3ebc7cf487e8a079c715a9ec26d026a9307a811755915534e08a67582074b6bbbf2ed30cc3ce517784a4ad0af3e01ab16914870259f"}, 0x1015, 0x2) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x9, 0x12, 0x2, 0xc, "a42933421f0de0dfbb162871ebf330f0ace4e2ec56f24413fb3281a9c9adf184683f436b69114d6494240472c549ec3013e803f3e74246b4da9f8c5534362d5b", "f41a1e1e0297bfa873d6fc9395116e71da241e61a746d55ac069a009aa003226", [0x1f, 0x4]}) [ 923.948684] UBIFS error (pid: 7582): cannot open "ubi: [ 923.948684] nbd", error -19 [ 923.950045] UBIFS error (pid: 7582): cannot open "ubi: [ 923.950045] nbd", error -19 [ 923.968749] vhci_hcd: invalid port number 0 11:32:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x5}) [ 924.160052] UBIFS error (pid: 7592): cannot open "ubi: [ 924.160052] nbd", error -19 [ 924.171930] UBIFS error (pid: 7593): cannot open "ubi: [ 924.171930] nbd", error -19 11:32:45 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x402, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x1000) 11:32:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x7a00000000000000}) 11:32:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7f00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x113, 0xd}}, 0x20) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000680)={r2, 0x4, 0x7, r2}) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r2, &(0x7f00000002c0)=""/39, 0xfffffe8d, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000004c0)=0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f00000005c0)={0x8, 0x7fffffff, r5, 0x5, r6, 0x101, 0x0, 0x2}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) [ 924.697748] UBIFS error (pid: 7605): cannot open "ubi: [ 924.697748] nbd", error -19 [ 924.699409] UBIFS error (pid: 7605): cannot open "ubi: [ 924.699409] nbd", error -19 11:32:46 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x48000000}) [ 925.037623] vhci_hcd: invalid port number 0 11:32:46 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc183"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:46 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="7582693a0a6e62640000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') lsetxattr$security_evm(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='security.evm\x00', &(0x7f0000000980)=@v1={0x2, "96e3f92a88f66f069f039f7977e4d831"}, 0x11, 0x2) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/148, 0x94}], 0x9, &(0x7f0000000040)=""/36, 0x24, 0x8001}, 0x40) 11:32:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x7f, 0x1, [0x4]}, &(0x7f0000000280)=0xa) 11:32:47 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x2000}) 11:32:47 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x10, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 925.368172] UBIFS error (pid: 7622): cannot open "u‚i: [ 925.368172] nbd", error -22 [ 925.369731] UBIFS error (pid: 7622): cannot open "u‚i: [ 925.369731] nbd", error -22 11:32:47 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x10001}}, 0x4, 0x7, 0x3f, 0x5, 0x7}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x5}, &(0x7f00000001c0)=0x8) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="c5d8b60512b0f3d326f0b0af735ccdc0", 0x10) [ 925.489226] UBIFS error (pid: 7635): cannot open "ubi: [ 925.489226] nbd", error -19 [ 925.490675] UBIFS error (pid: 7640): cannot open "ubi: [ 925.490675] nbd", error -19 [ 925.490981] vhci_hcd: invalid port number 0 11:32:47 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 925.596971] UBIFS error (pid: 7646): cannot open "ubi: [ 925.596971] nbd", error -19 11:32:47 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="6062693ad0610aef41640000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'ubi:\nnbd'}) 11:32:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x100000000000000}) [ 925.599667] UBIFS error (pid: 7648): cannot open "ubi: [ 925.599667] nbd", error -19 [ 925.724056] UBIFS error (pid: 7653): cannot open "`bi:Ða [ 925.724056] ïAd", error -22 [ 925.725565] UBIFS error (pid: 7653): cannot open "`bi:Ða [ 925.725565] ïAd", error -22 [ 925.804413] vhci_hcd: invalid port number 0 11:32:47 executing program 0: r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x40, 0x3d) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f00000000c0)=""/87) 11:32:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x500000000000000}) [ 926.289079] vhci_hcd: invalid port number 0 11:32:48 executing program 5: 11:32:48 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r0, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000640)=0x0) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00') r10 = getpgid(0x0) r11 = geteuid() r12 = getgid() sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)="ffa4bbce13c79765664b5d0a10ff1db4eab05232efd3ee151d0da0b6bc2bf22f6eeba62db49b87fe0e67829daae1dabb035d7e59f0eefbb599505701b02ecebecd5e4440594e95f6fa88458d540958f5b6fcacfa69a99742e0a28cc5aedf87eefdb8df62009dd2f293fe9d64d9505154b48e3c5ef12e897fcbc531b607004c7e7e0b86476da7861c6b0941a3b7eaf3005f4c80fa8a8c84799c846014538b1edbb2168375336b17973e7b50707e758041ad0e89232d44229bc6e6e594b3e06f9dafd8f158811e7f01873d043e", 0xcc}], 0x1, &(0x7f0000000780)=[@cred={0x18, 0x1, 0x2, r1, r2, r3}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r7, r8, r9}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}], 0xac, 0x4000}, 0x4000) 11:32:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000200)={0xa, 0xffffffff, {0x51, 0x800, 0x6, {0x7, 0x6}, {0x5}, @cond=[{0x0, 0x74dd005c, 0x4, 0x200, 0xffffffff, 0x13db7662}, {0x7, 0x6, 0x6, 0x6, 0x8, 0x101}]}, {0x52, 0x4, 0x3, {0x0, 0x7}, {0x6, 0x8}, @cond=[{0xffffffffffffff00, 0x1, 0x1, 0x8, 0x1000, 0xffffffffffffff7f}, {0x97c0, 0x3, 0x3, 0x800, 0x5, 0x3f}]}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6800000000000000}) 11:32:48 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 926.768243] vhci_hcd: invalid port number 0 11:32:48 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 11:32:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6000000000000000}) 11:32:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000001640)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x800455d1, &(0x7f0000000140)) 11:32:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x4, 0x80, 0x805, 0x0, 0xffffffffffffffff, 0x0, [0x6]}, 0x2c) [ 926.776331] UBIFS error (pid: 7671): cannot open "ubi: [ 926.776331] nbd", error -19 [ 926.798730] UBIFS error (pid: 7671): cannot open "ubi: [ 926.798730] nbd", error -19 11:32:48 executing program 5: getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000200)="6c6f00966fd651b159a9c84a2c60d29800000020") getgid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000fe00000000bd4a0000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 926.899639] vhci_hcd: invalid port number 0 11:32:48 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2500, 0x42) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000900)='syz0\x00', 0x1ff) 11:32:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x48}) 11:32:48 executing program 3: [ 927.032214] UBIFS error (pid: 7709): cannot open "ubi: [ 927.032214] nbd", error -19 [ 927.034688] UBIFS error (pid: 7711): cannot open "ubi: [ 927.034688] nbd", error -19 [ 927.082025] vhci_hcd: invalid port number 0 11:32:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x28000, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000440)="19decb111a98b181910d8d5ef3f1bd937714b6ea8b249d726b805d572de7e6b87b315d7501d4f78723004b128555a132561c0c6b51e2034e50a70683bb09ee92488164f56c6981c70f79afcce9d11c2da18f2dc5012c96519e84501f9ba83bec581b10d7f92cd4cbdfaa1e754738abb3cb0b77c66358a3e63f37c5fa2124afacb75061291ee102a58759b446c2fa2bdf0cb0093edb2db4ce3b91bc7447609bc2ae549849cf22134f28fd7e697992d0346808c779da7f88b7dd8260a5db26765095e9a7cb0b6655c06479b3e68225a646bb5024364f4682408c8c66", 0xdb) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000002c0)={{0x8, 0x2, 0x80, 0x2, '\x00', 0x4}, 0x6, 0x20000000, 0x7, r4, 0x9, 0x0, 'syz1\x00', &(0x7f0000000240)=['/dev/net/tun\x00', ']eth0!]\x00', '/dev/net/tun\x00', '+\x00', '[cpusetbdev,\x00', '/dev/net/tun\x00', '\x00', '/dev/vcs\x00', 'ppp0-!#cpuset+nodevvmnet1#,em1}\x00'], 0x68, [], [0x3, 0x0, 0x5]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:49 executing program 5: 11:32:49 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x2) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="7562693a0a6e828dc70000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:49 executing program 1: 11:32:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xffffffff00000000}) 11:32:49 executing program 3: 11:32:49 executing program 1: 11:32:49 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x800000000000000}) 11:32:49 executing program 5: [ 927.698451] vhci_hcd: invalid port number 0 [ 927.703874] UBIFS error (pid: 7731): cannot open "ubi: [ 927.703874] n‚Ç", error -19 [ 927.705208] UBIFS error (pid: 7733): cannot open "ubi: [ 927.705208] n‚Ç", error -19 11:32:49 executing program 3: 11:32:49 executing program 1: 11:32:49 executing program 5: [ 927.860702] vhci_hcd: invalid port number 0 11:32:50 executing program 3: 11:32:50 executing program 0: lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2000001c4) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="7562693a0a6e62640000b4991599b05c23856c5d4cedfc851603cf767ba28be475dbe3437f11b16300393858b8a365c6a36cab20e56a0005eb3af51a3626f11f3541a7ae248c"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='iso<]60\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:50 executing program 1: 11:32:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"760000070008002e030000200010ef00", 0x43732e5398416f0a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:50 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6000}) 11:32:50 executing program 5: 11:32:50 executing program 5: 11:32:50 executing program 1: [ 928.618415] vhci_hcd: invalid port number 0 11:32:50 executing program 3: 11:32:50 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x49, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:50 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x600}) 11:32:50 executing program 5: 11:32:50 executing program 1: 11:32:50 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000100)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="7562976673002ed80d49623775", 0x0, &(0x7f0000000000)='adfs\x00') [ 928.761662] UBIFS error (pid: 7779): cannot open "ubi: [ 928.761662] nbd", error -19 [ 928.793946] vhci_hcd: invalid port number 0 11:32:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x5af100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={&(0x7f0000000580)=@canfd={{0x0, 0xc6, 0x6, 0x10001}, 0x4, 0x1, 0x0, 0x0, "7fc656f65c8d5c29256f51d67f37ccab5c0f6fe4acc2f860b3621bfaa241fc5f0ca69fc03b62ce90375818309d02bda1fd0fbb47f4c1630213a0177cf16c4f33"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x122f}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:51 executing program 3: 11:32:51 executing program 1: 11:32:51 executing program 5: 11:32:51 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4c00}) 11:32:51 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 929.531180] vhci_hcd: invalid port number 0 11:32:51 executing program 3: 11:32:51 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x74}) 11:32:51 executing program 1: 11:32:51 executing program 5: [ 929.554187] UBIFS error (pid: 7800): cannot open "ubi: [ 929.554187] nbd", error -19 [ 929.555509] UBIFS error (pid: 7802): cannot open "ubi: [ 929.555509] nbd", error -19 11:32:51 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)=""/144, &(0x7f0000000040)=0x90) 11:32:51 executing program 1: [ 929.712414] vhci_hcd: invalid port number 0 [ 929.735959] UBIFS error (pid: 7817): cannot open "ubi: [ 929.735959] nbd", error -19 [ 929.765796] UBIFS error (pid: 7817): cannot open "ubi: [ 929.765796] nbd", error -19 11:32:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2001) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000240)={{0x2, 0x4e20, @broadcast}, {0x306, @random="407c561516cb"}, 0x40, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 'ip6tnl0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='wlan1bdeveth0(-.@\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000001640)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 11:32:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0xc1, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team_slave_1\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe76, 0xc0, &(0x7f00000000c0), 0x6) 11:32:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000001640)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x80045500, &(0x7f0000000140)) 11:32:52 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3fff, 0x88) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x6}) 11:32:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40010002, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') [ 930.478135] UBIFS error (pid: 7834): cannot open "ubi: [ 930.478135] nbd", error -19 [ 930.493248] vhci_hcd: invalid port number 0 11:32:52 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000001c0)={0x7, 0x9, 0x80000000000, 0x1ff}, 0x10) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') r1 = request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='ubi:\nnbd', 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000300)="97d766d93b8476624805e7b070c20f78d77bd9a1c491ae65be50fa930b5e1e78da59a31ddb237112a1b28360316360050394193c06c22b", 0x37) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "700e28bf40d480457ce60e3944277336"}, 0x11, 0x3e28f89e7a05cc33) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000380)=0x8) 11:32:52 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='ip6gre0\x00', 0x1db73a7709319826) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 11:32:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x4800000000000000}) 11:32:52 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x80000040, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:52 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 930.612084] UBIFS error (pid: 7850): cannot open "ubi: [ 930.612084] nbd", error -19 [ 930.628217] UBIFS error (pid: 7854): cannot open "ubi: [ 930.628217] nbd", error -19 [ 930.667084] vhci_hcd: invalid port number 0 [ 930.730231] UBIFS error (pid: 7865): cannot open "ubi: [ 930.730231] nbd", error -19 11:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[]}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:52 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:52 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 11:32:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x3000000}) 11:32:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40010002, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') 11:32:52 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 931.410430] vhci_hcd: invalid port number 0 [ 931.422771] UBIFS error (pid: 7882): cannot open "ubi: [ 931.422771] nbd", error -19 11:32:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x3}) 11:32:53 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000000240)=@ipx, 0x80, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/130, 0x82}, {&(0x7f00000001c0)}, {&(0x7f0000001380)=""/55, 0x37}, {&(0x7f00000013c0)=""/187, 0xbb}], 0x5, &(0x7f00000014c0)=""/158, 0x9e, 0x1}, 0x9}, {{&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001600)=""/215, 0xd7}, {&(0x7f0000001700)=""/34, 0x22}, {&(0x7f0000001740)=""/26, 0x1a}, {&(0x7f0000001780)=""/244, 0xf4}], 0x4, 0x0, 0x0, 0x6}, 0x3}, {{&(0x7f00000018c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001980)=""/122, 0x7a}, {&(0x7f0000001a00)=""/163, 0xa3}, {&(0x7f0000001ac0)=""/217, 0xd9}, {&(0x7f0000001bc0)=""/221, 0xdd}, {&(0x7f0000001cc0)=""/109, 0x6d}], 0x6, &(0x7f0000001d80)=""/188, 0xbc, 0x1d}, 0x5}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001e40)=""/222, 0xde}, {&(0x7f0000001f40)=""/10, 0xa}, {&(0x7f0000001f80)=""/250, 0xfa}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/181, 0xb5}, {&(0x7f0000002240)=""/125, 0x7d}, {&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/80, 0x50}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003440)=""/4096, 0x1000, 0xffffffffffff38c1}, 0x80000000}], 0x4, 0x2, &(0x7f00000044c0)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="7576c007d60000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 931.437044] UBIFS error (pid: 7882): cannot open "ubi: [ 931.437044] nbd", error -19 [ 931.521212] vhci_hcd: invalid port number 0 11:32:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7000000}) [ 931.557591] UBIFS error (pid: 7901): cannot open "uvÀÖ", error -22 [ 931.560316] UBIFS error (pid: 7901): cannot open "uvÀÖ", error -22 11:32:53 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) pipe(&(0x7f0000000000)) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000040)='ppp1(posix_acl_access\x00') ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) [ 931.673346] vhci_hcd: invalid port number 0 11:32:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6c000000}) 11:32:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 931.831917] UBIFS error (pid: 7908): cannot open "ubi: [ 931.831917] nbd", error -19 [ 931.846307] UBIFS error (pid: 7910): cannot open "ubi: [ 931.846307] nbd", error -19 [ 931.953223] vhci_hcd: invalid port number 0 11:32:53 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) splice(r0, &(0x7f0000000040), r2, &(0x7f00000000c0), 0x9, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:54 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x10}) 11:32:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xfffffffffffffffc, &(0x7f0000000000)='adfs\x00') 11:32:54 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 932.537714] vhci_hcd: invalid port number 0 11:32:54 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x600}) 11:32:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 932.672327] UBIFS error (pid: 7944): cannot open "ubi: [ 932.672327] nbd", error -19 [ 932.674208] UBIFS error (pid: 7944): cannot open "ubi: [ 932.674208] nbd", error -19 [ 932.700585] vhci_hcd: invalid port number 0 11:32:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7a00}) 11:32:54 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) [ 932.913302] vhci_hcd: invalid port number 0 [ 933.020632] UBIFS error (pid: 7958): cannot open "ubi: [ 933.020632] nbd", error -19 11:32:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4}) [ 933.042191] UBIFS error (pid: 7958): cannot open "ubi: [ 933.042191] nbd", error -19 [ 933.297003] vhci_hcd: invalid port number 0 11:32:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:55 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:55 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x3f, 0x20) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="75d80f49376e623f7ec2291d329ec6cea78263b9390900dc4e39c7e933f07679fc639f1f0a190905541114652592e36693d2c94e39f3499c6745535556"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2000000000000000}) [ 933.619520] vhci_hcd: invalid port number 0 11:32:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fcntl$setstatus(r0, 0x4, 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xe6, 0x40800) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x8, {{0x0, 0xe02, 0x4, 0x7e, 0x9, 0x10000, 0x2, 0x37}}}, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:55 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00') mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7a000000}) [ 933.814449] UBIFS error (pid: 7987): cannot open "ubi: [ 933.814449] nbd", error -19 [ 933.839568] UBIFS error (pid: 7988): cannot open "ubi: [ 933.839568] nbd", error -19 [ 933.895558] vhci_hcd: invalid port number 0 11:32:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000080)={0xa3}) 11:32:55 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x3ff, @remote, 0x1}, r1}}, 0x30) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 11:32:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6c00}) 11:32:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 934.293182] UBIFS error (pid: 8003): cannot open "/dev/loop0", error -22 [ 934.294522] UBIFS error (pid: 8003): cannot open "/dev/loop0", error -22 [ 934.303446] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor5' sets config #163 [ 934.303453] vhci_hcd: invalid port number 0 11:32:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffff, 0x300) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x8c, 0x1000, "6b91d2770e7495790d8619a130b988ac56be74aeb759ddd2130114d96eb1d767de931d0b2f6098ed1307ad0e0327a28707bdf0f2b7c69c851f99838321a5887e4be55cfd13d3dc3f7b38cd7a77a3683d62329c061933e2442b17a4e2d677048356ca91548ec46be4f2d14cb052c319d228726f5ea6421a8a7d7353957fe2b319a76ba0b5"}, &(0x7f0000000280), 0x400) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000100)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2000}) 11:32:56 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:56 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="7562693a0a6e625cfa69b4025eecafd7d2d868a600002ab1cf61889a5e73562c64"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x20, 0x8}]}, 0xc, 0x2) [ 934.443275] UBIFS error (pid: 8016): cannot open "ubi: [ 934.443275] nbd", error -19 [ 934.508157] vhci_hcd: invalid port number 0 [ 934.560484] UBIFS error (pid: 8026): cannot open "ubi: [ 934.560484] nb\úi´^ì¯×ÒØh¦", error -19 [ 934.561910] UBIFS error (pid: 8026): cannot open "ubi: [ 934.561910] nb\úi´^ì¯×ÒØh¦", error -19 11:32:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffff01, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6800}) 11:32:56 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x100, @loopback, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}], 0x2c) open(&(0x7f0000000140)='./file0\x00', 0x100, 0x400) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 935.014119] vhci_hcd: invalid port number 0 11:32:56 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:56 executing program 0: getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0x2}]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r0, &(0x7f0000000240)=0x4) ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000280)=0x9) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futimesat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={{r2, r3/1000+10000}, {0x77359400}}) 11:32:56 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4c}) 11:32:57 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 935.402117] vhci_hcd: invalid port number 0 11:32:57 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) 11:32:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xa}) [ 935.614850] vhci_hcd: invalid port number 0 [ 935.650196] UBIFS error (pid: 8071): cannot open "ubi: [ 935.650196] nbd", error -19 11:32:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x74000000}) [ 935.660464] UBIFS error (pid: 8071): cannot open "ubi: [ 935.660464] nbd", error -19 11:32:57 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x20, &(0x7f00000000c0)={0x1}, 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x8000, 0x0) [ 935.975222] vhci_hcd: invalid port number 0 [ 936.070594] UBIFS error (pid: 8082): cannot open "ubi: [ 936.070594] nbd", error -19 11:32:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x5, 0x0) r1 = getpid() process_vm_writev(r1, 0xffffffffffffffff, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/41, 0x29}, {&(0x7f0000000500)=""/1, 0x1}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/253, 0xfd}], 0x7, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000240)={0xfffffffffffffffe, 0x8, 0x6}) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0300001b000000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 936.072246] UBIFS error (pid: 8082): cannot open "ubi: [ 936.072246] nbd", error -19 11:32:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4c000000}) 11:32:57 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) [ 936.345789] vhci_hcd: invalid port number 0 [ 936.381437] UBIFS error (pid: 8092): cannot open "ubi: [ 936.381437] nbd", error -19 [ 936.393276] UBIFS error (pid: 8092): cannot open "ubi: [ 936.393276] nbd", error -19 11:32:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:58 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) 11:32:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x300}) 11:32:58 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:58 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="03000003bd157f88ace882ee000000000008001b00000000000322f21d470633f0f11d0e96bc37ec60f9e04bab259797930c5416e289285207874bbe8491efac6e0b3df119013b9bf09918650d6a3a5536e5224479017d76aae86b2033dececcbb52df13e22418141e04d81cc5abd81816edbe39fe040234f4d84c509f6b95"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) [ 936.796223] UBIFS error (pid: 8102): cannot open "ubi: [ 936.796223] nbd", error -19 [ 936.797714] UBIFS error (pid: 8102): cannot open "ubi: [ 936.797714] nbd", error -19 [ 936.812047] vhci_hcd: invalid port number 0 11:32:58 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) syslog(0x3, &(0x7f0000000040)=""/56, 0x38) chroot(&(0x7f0000000100)='./file0\x00') socket$bt_rfcomm(0x1f, 0x0, 0x3) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x5}) [ 937.026523] vhci_hcd: invalid port number 0 11:32:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x68}) [ 937.064086] UBIFS error (pid: 8126): cannot open "", error -22 [ 937.188981] vhci_hcd: invalid port number 0 11:32:58 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') fcntl$setlease(r0, 0x400, 0x2) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e) 11:32:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7}) [ 937.203823] UBIFS error (pid: 8135): cannot open "", error -22 [ 937.566816] vhci_hcd: invalid port number 0 11:32:59 executing program 0: umount2(&(0x7f0000000040)='./file0\x00', 0x8) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 937.883283] UBIFS error (pid: 8146): cannot open "ubi: [ 937.883283] nbd", error -19 [ 937.884380] UBIFS error (pid: 8147): cannot open "ubi: [ 937.884380] nbd", error -19 11:32:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) setfsgid(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r3}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x100000000000000}) 11:32:59 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xc1, 0x200) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:32:59 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="00e7ab02c54e436deff79c1363449f563a0a6e62cb64003be7ac2cc0bb0a8d9b06add4d765487d8c412a1158e1430702e464ac5b40c7463c9f0f83953833e06be79600746458634d57fb476272092be855f8c02e80562483249a50"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x44}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000240)=""/184) getsockname(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000040)=0x80) 11:32:59 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:32:59 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 938.150108] UBIFS error (pid: 8152): cannot open "", error -22 [ 938.151378] UBIFS error (pid: 8152): cannot open "", error -22 [ 938.162932] vhci_hcd: invalid port number 0 11:32:59 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000240)={{0x3f, 0x5, 0x1, 0x3, 0x5, 0x7ff}, 0x179, 0xfffffffffffffffa, 0x4, 0xdc44, 0x7f, "7d8eeee36b525b45a1a3f86ec7d6a72ae051b5754f9a4322edb3a05637aa34421e4143ec7998f2f76adf993efeb93d6fec3047e3ea94286d2a6f9581c286bae350b69827a69d6797e520083db0cd536756bc64207a419a4f10f5fc6fddf7209d4f9da3196aa87d49a3b34e3e256b9674e562222ccb18e883b1bb42aa3ddb18b2"}) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="7562693a0a6e38e500003457fc8ad04b0e299eb587da9272ef25a4947636d88a3d1df542d0567efdb71adad0a70bcbeec3590c7d180a452f77a991edbe30c92bfdaa0a24f7667d0f7810425c435e585779ed95c430dff2aa92904573c903c3654ec0f10e56e8ea4cbcdff08273546489a481b01f19533bc5b03430de1805280b13cca38eac4192c2bddec50553a5ab086f54fed2751bb357c038"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:32:59 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:32:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x20000000}) [ 938.355119] UBIFS error (pid: 8176): cannot open "ubi: [ 938.355119] n8å", error -19 11:33:00 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 938.363126] UBIFS error (pid: 8177): cannot open "ubi: [ 938.363126] n8å", error -19 [ 938.433799] vhci_hcd: invalid port number 0 11:33:00 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x111, 0x5, 0x6, "b4cb3b3efed6d8b977051094b74219d1", "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"}, 0x111, 0x2) 11:33:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x48}) [ 938.687919] UBIFS error (pid: 8187): cannot open "ubi: [ 938.687919] nbd", error -19 [ 938.709325] UBIFS error (pid: 8187): cannot open "ubi: [ 938.709325] nbd", error -19 [ 938.874054] vhci_hcd: invalid port number 0 11:33:00 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:00 executing program 5: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x500000000000000}) 11:33:00 executing program 0: mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0xa00, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@sack_info={r3, 0x1ff, 0xd9}, &(0x7f0000000540)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x4002, &(0x7f0000000340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}], [{@fowner_lt={'fowner<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x25}}, {@smackfsdef={'smackfsdef'}}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, 'ubifs\x00'}}, {@subj_type={'subj_type'}}]}}) 11:33:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xc6, "3fd613330c8d9c53d6ae1dc7fe1e4ca62b70a9825437f68a98bf496d454a10038a1074857a7c70ab46be7c0fce3c5410dda0c23f778015c1e7fdf32c52efbc506b5caa08a5ab5e0325fac976051e7f143d9bce3a861df8723fc648691edc0293a48c4c84a5dd8a354640aa18567cf0817e85fcee3635fb7e8c8248d2fcc7f2d91f9e806c72f7d79033c34f940fd39531a1ab0e822e43d950204c65a0507743f57315c379c947b7bb268d140d68aab5f03716fbeb22a919d877de8e7b3e271bcd72d22f480c2d"}, &(0x7f0000000300)=0xce) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x8001, 0x1, 0x4, 0x9, 0x3, 0x13e5, 0x7, 0x0, r3}, &(0x7f0000000380)=0x20) syncfs(r2) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:00 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:00 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 939.185798] vhci_hcd: invalid port number 0 11:33:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) sendmsg$kcm(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="178f1961d63b033df6b10be89494e52cf449eb32b5c931b0656b3e57d7566f3a14686995606fcfc50042f3b7cb3ea83d0bae0e71dd8d7718d76d18ca1c49c9bae520f2c2a20606dc5dad87a51d8b423fc745ffb500739daaee996b910308e7ce62328109fdb04699ef5e419d6dcf72d89c73f189ce7aa513fd", 0x79}, {&(0x7f00000001c0)="347b39d441de4845db206c935992fe6901c9fabc9b1970ed40569bdaaf8de7782cbdd6aab472d285", 0x28}, {&(0x7f0000000240)="1dc5a0d9c3890c0fed048150a0c7fdb15732af354d0d17f4f5d4d298da5a3c0c2c3876a0185deb780995ed3e3bea9db13f6eab0b4caf0a168c7e0d18e6528509f91e45bf52168897b69b34efa33900", 0x4f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="a9fa11d41860a3b37e20d0c9d85e9abe2573b80e8123ec9e", 0x18}, {&(0x7f0000001300)="bb6530139f99676f522f58a37211c2b0dd7af9ab2114af617a3148ab32c1e5947eedc1040ab82f92b2e3ebed7cf964df4cbee83a9511ac65ef4ff1294b2565df8b1024c84eb48d88321f4897c9d613c985189a132f5aeca1a230e6f37638426b68cd7e1791699292dfb836244a230f6a6fd37cae1fe378f870ccfd62ee3656bff1834c70028bf1d1752a5054cf2b09fd30f89aad2794be1c6bbca977a3a7fd7fd606cf6a168c1f2c8668be7bfdbabbe2873bdfe4c7beb94de9b9c7", 0xbb}, {&(0x7f00000013c0)="92c8fbc79476e4e9d62472eaf953bda3232f584601cd877108956d5f43b77820875746d6d49f7049bd266905c0db216c08376f2d3e0535d2e1528986fc9c4de818e7cfed4cf82ac6b5aa9c3acec84c8985b9e6e151c34a4c1b4f37b19eac816b0292cd2cca55e221dc6c00e23efb06fed44cb6b8de", 0x75}, {&(0x7f0000001440)="fe4732d4b4c65195baabf26f290271fca762223edbfcea08314423d28eee996fe0830e6ca8ff5ab96e5b7259c39bb9e791d822d39f13731d05d0cc03208a7923c58702", 0x43}, {&(0x7f00000014c0)="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", 0xfd}], 0x9, &(0x7f0000001640)=[{0x100c, 0x11f, 0x1, "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"}, {0x84, 0x119, 0x4, "582534f64c6ce4fd7c9e5262f3ecd7cc6e856e7df33250c62e5a6f161b73d8b0f37d05ba2e407ae8a53dd9402ca0ba290547d79a612c7d542970d6d3838e95cc0d673ca289551dd8ff99899ba6b810a8e621dcfa00f17c8a56b4dfa9fbeefcaadbab4fd9c98087c18e93f41f4fa22f3436b982864a"}, {0x8c, 0x115, 0x4, "ae0ec548fa2a19579f21b1be4973d97cc2583bfe685f3b9ffa677ad9d4d63c07d9f79d648c09e16ec70abb02ced2e33d8dc586a878b7aa0cdd00e1228163cbca092a8a5567d151370c0815ea33ba70cd7f5b43397ec5afd06e40ff9d65ffa561d119bca5dc7fe7f67cd09957a2b8764ba6bc0d0e9ba006f92bd6c3b8e6e5dc"}, {0x30, 0xff, 0x3, "a835170066c5eea552aebb898232fa8abced877bf105886b565213f131c0ee3702"}, {0xa4, 0x109, 0x7fffffff, "472a9758f4660f12ce4d8d0bb34739f5e8a50f658dccbfa757f5a2ef82069d7262e37b2a89861f3915df79560063df14da34b98d99a0c63487979d086e795a662d5250e55a63763999cfd4b87f6c9f3f40857e2b167b1b71b863a2d6071fc3132dd2a692b8680ee99fe3ab8f9bb949345b0c348287d329fa8ccd6d9e9d5678f0c623b3c198ded05103df1af9b93669cb103f1256c0"}], 0x11f0, 0x4000080}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') 11:33:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x60000000}) 11:33:00 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 939.394196] vhci_hcd: invalid port number 0 11:33:01 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) acct(0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="5562693a0a681d14fa00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x800, 0x3]}, &(0x7f00000000c0)=0x8) 11:33:01 executing program 5: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:01 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4c00}) 11:33:01 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="7547a9693a0a6e626400"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$RTC_UIE_OFF(r0, 0x7004) 11:33:01 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)) 11:33:01 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:01 executing program 5: r0 = socket(0x6, 0x3, 0x3f) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000200)={0x3, 0x0, 0x9136, 0x0, 'syz0\x00', 0x5}) sync() connect$inet(r0, &(0x7f0000390000)={0x2, 0x0, @loopback}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x7, 0x65, 0x2, 0x10001}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x6, 0x100000001}) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x0026'], &(0x7f0000000040)=0x8) 11:33:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x10000000000000}) [ 940.231829] UBIFS error (pid: 8254): cannot open "uG©i: [ 940.231829] nbd", error -22 [ 940.232632] UBIFS error (pid: 8254): cannot open "uG©i: [ 940.232632] nbd", error -22 [ 940.247507] vhci_hcd: invalid port number 0 [ 940.352546] vhci_hcd: invalid port number 0 11:33:01 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="27045d9ad62d8818997e7cf065c58579eab15264c46b0da1544218cd8cebef030ad1ec128da31c1660538dbe835d6c8850290d6f494bd5007250bab28c51cc49e861ffa307927c85158c7b807069c1c8b0165901b9ab4829caf4052c2c24f7c3adb7334d4ac810f50b7bddab81174320e93bb63071847d04a5dba6"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') chroot(&(0x7f0000000040)='./file1\x00') fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file1\x00', 0x8, 0x2) inotify_init1(0x80000) 11:33:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6000000000000000}) 11:33:02 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 940.540552] UBIFS error (pid: 8273): cannot open "']šÖ-ˆ™~|ðeÅ…yê±RdÄk ¡TBÍŒëï [ 940.540552] Ñì£`S¾ƒ]lˆP) oIKÕ", error -22 [ 940.548224] UBIFS error (pid: 8273): cannot open "']šÖ-ˆ™~|ðeÅ…yê±RdÄk ¡TBÍŒëï [ 940.548224] Ñì£`S¾ƒ]lˆP) oIKÕ", error -22 [ 940.570375] vhci_hcd: invalid port number 0 11:33:02 executing program 0: mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) 11:33:02 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7400000000000000}) 11:33:02 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="7562693a0a6e6264000057b442ca90621efb1d843863128c422994bb05b365f97a2b555f6f6cc4a002dd4018aab6947a8d419234c709a60f6d0ffeedbddf3599be6376f1e01bbb"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:33:02 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x2, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xfffffffffffffffe, 0x0) 11:33:02 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:02 executing program 5 (fault-call:13 fault-nth:0): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:03 executing program 0: r0 = userfaultfd(0x80800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="7598690109040000fdff00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 941.443546] UBIFS error (pid: 8290): cannot open "ubi: [ 941.443546] nbd", error -19 [ 941.457395] UBIFS error (pid: 8293): cannot open "ubi: [ 941.457395] nbd", error -19 [ 941.460349] vhci_hcd: invalid port number 0 11:33:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xffffff7f}) 11:33:03 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x101000, 0xfffffffffffffffe) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x44) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="7562693ace62263c0054eb81b12adbfc0a6e626400df3fe6d10080000000000000bb00"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f00000001c0)={0x1, 0x3, 0x9, 0xfffffffffffffbff}) bind$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 941.605732] FAULT_INJECTION: forcing a failure. [ 941.605732] name failslab, interval 1, probability 0, space 0, times 0 [ 941.618430] UBIFS error (pid: 8307): cannot open "u˜i ", error -22 [ 941.667425] vhci_hcd: invalid port number 0 [ 941.723504] CPU: 0 PID: 8305 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #184 [ 941.730842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.740307] Call Trace: [ 941.742917] dump_stack+0x1c4/0x2b4 [ 941.746570] ? dump_stack_print_info.cold.2+0x52/0x52 [ 941.751778] ? lock_downgrade+0x900/0x900 [ 941.755953] ? native_apic_msr_write+0x5b/0x80 [ 941.760562] should_fail.cold.4+0xa/0x17 [ 941.764643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 941.769762] ? perf_event_namespaces_output+0x490/0x490 [ 941.775152] ? kvm_sched_clock_read+0x9/0x20 [ 941.779573] ? sched_clock+0x31/0x40 [ 941.783296] ? sched_clock_cpu+0x1b/0x1b0 [ 941.787457] ? hrtimer_try_to_cancel+0xb8/0x6f0 [ 941.792144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.797698] ? cpu_clock_event_start+0x12c/0x180 [ 941.802463] ? task_clock_event_start+0x1f0/0x1f0 [ 941.807322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.812877] ? check_preemption_disabled+0x48/0x200 [ 941.817915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.823467] ? perf_pmu_enable+0xd9/0x120 [ 941.827637] ? print_usage_bug+0xc0/0xc0 [ 941.831816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.837375] ? __perf_event_period+0x5c0/0x5c0 [ 941.841971] ? mark_held_locks+0x130/0x130 [ 941.846220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.851771] ? check_preemption_disabled+0x48/0x200 [ 941.856833] __should_failslab+0x124/0x180 [ 941.861083] should_failslab+0x9/0x14 [ 941.864898] kmem_cache_alloc_node+0x56/0x730 [ 941.869409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.874708] ? lockdep_hardirqs_on+0x421/0x5c0 [ 941.879316] __alloc_skb+0x119/0x770 [ 941.883050] ? skb_scrub_packet+0x490/0x490 [ 941.887396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.892177] ? retint_kernel+0x2d/0x2d [ 941.896099] _sctp_make_chunk+0x58/0x280 [ 941.900183] sctp_make_heartbeat+0x8f/0x430 [ 941.904519] ? sctp_make_violation_max_retrans+0x70/0x70 [ 941.909981] ? visit_groups_merge+0x6c0/0x6c0 [ 941.914490] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 941.919696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.925252] sctp_sf_heartbeat.isra.23+0x26/0x180 [ 941.930133] sctp_sf_do_prm_requestheartbeat+0x27/0x110 [ 941.935511] sctp_do_sm+0x1c1/0x7190 [ 941.939268] ? sctp_do_8_2_transport_strike.isra.16+0x950/0x950 [ 941.945338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 941.950886] ? check_preemption_disabled+0x48/0x200 [ 941.955933] ? print_usage_bug+0xc0/0xc0 [ 941.960010] ? debug_smp_processor_id+0x1c/0x20 [ 941.964694] ? perf_trace_lock+0x14d/0x7a0 [ 941.968954] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.973746] ? zap_class+0x640/0x640 [ 941.977484] ? trace_hardirqs_off+0x310/0x310 [ 941.981999] ? mark_held_locks+0xc7/0x130 [ 941.986158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.990932] ? lockdep_hardirqs_on+0x421/0x5c0 [ 941.995522] ? retint_kernel+0x2d/0x2d [ 941.999422] ? trace_hardirqs_on_caller+0xc0/0x310 [ 942.004370] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.009143] ? trace_hardirqs_off+0x310/0x310 [ 942.013650] ? find_held_lock+0x36/0x1c0 [ 942.017730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.023280] ? retint_kernel+0x2d/0x2d [ 942.027199] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 942.032495] sctp_apply_peer_addr_params+0x137/0x2130 [ 942.037721] sctp_setsockopt_peer_addr_params+0x74f/0x820 [ 942.043631] ? sctp_getsockopt_assoc_stats+0x930/0x930 [ 942.048941] ? __local_bh_enable_ip+0x1a3/0x260 [ 942.053626] sctp_setsockopt+0x1d96/0x6da0 [ 942.057897] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 942.063631] ? mark_held_locks+0x130/0x130 [ 942.067884] ? __lock_acquire+0x7ec/0x4ec0 [ 942.072134] ? check_preemption_disabled+0x48/0x200 [ 942.077166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.082723] ? __lock_acquire+0x7ec/0x4ec0 [ 942.086979] ? mark_held_locks+0x130/0x130 [ 942.091242] ? mark_held_locks+0x130/0x130 [ 942.095515] ? zap_class+0x640/0x640 [ 942.099436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.104986] ? check_preemption_disabled+0x48/0x200 [ 942.110017] ? debug_smp_processor_id+0x1c/0x20 [ 942.114693] ? perf_trace_lock+0x14d/0x7a0 [ 942.118942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.124491] ? check_preemption_disabled+0x48/0x200 [ 942.129657] ? debug_smp_processor_id+0x1c/0x20 [ 942.134341] ? perf_trace_lock+0x14d/0x7a0 [ 942.138596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 942.144258] ? zap_class+0x640/0x640 [ 942.147988] ? debug_smp_processor_id+0x1c/0x20 [ 942.152669] ? perf_trace_lock+0x14d/0x7a0 [ 942.156917] ? _parse_integer+0x180/0x180 [ 942.161076] ? graph_lock+0x170/0x170 [ 942.164885] ? zap_class+0x640/0x640 [ 942.168623] ? find_held_lock+0x36/0x1c0 [ 942.172686] ? graph_lock+0x170/0x170 [ 942.176498] ? find_held_lock+0x36/0x1c0 [ 942.180572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 942.186120] ? aa_label_sk_perm+0x46d/0x8e0 [ 942.190475] ? aa_profile_af_perm+0x410/0x410 [ 942.194978] ? kasan_check_read+0x11/0x20 [ 942.199140] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 942.204471] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 942.209406] ? aa_sk_perm+0x218/0x8b0 [ 942.213211] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 942.218150] ? aa_af_perm+0x5a0/0x5a0 [ 942.221968] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 942.226911] compat_sock_common_setsockopt+0x10c/0x150 [ 942.232288] ? sock_common_setsockopt+0xe0/0xe0 [ 942.236964] __compat_sys_setsockopt+0x1b3/0x860 [ 942.241735] ? __compat_sys_getsockopt+0x8a0/0x8a0 [ 942.246693] ? lockdep_hardirqs_on+0x421/0x5c0 [ 942.251286] ? trace_hardirqs_on+0xbd/0x310 [ 942.255622] ? __ia32_sys_read+0xb0/0xb0 [ 942.259695] ? entry_SYSENTER_compat+0x70/0x7f [ 942.264297] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 942.269793] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 942.269818] do_fast_syscall_32+0x34d/0xfb2 [ 942.269839] ? do_int80_syscall_32+0x890/0x890 [ 942.269858] ? entry_SYSENTER_compat+0x68/0x7f [ 942.279272] ? trace_hardirqs_off_caller+0xbb/0x310 [ 942.279287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.279301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.279316] ? trace_hardirqs_on_caller+0x310/0x310 [ 942.279334] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 942.313641] ? prepare_exit_to_usermode+0x291/0x3b0 [ 942.318684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 942.323555] entry_SYSENTER_compat+0x70/0x7f [ 942.327979] RIP: 0023:0xf7f94ca9 [ 942.331360] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 942.350271] RSP: 002b:00000000f5f6f0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 942.357997] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 942.365265] RDX: 0000000000000009 RSI: 00000000200002c0 RDI: 0000000000000098 11:33:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000080)={0xa3}) 11:33:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4000000}) [ 942.372522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.379779] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 942.387036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.457728] vhci_hcd: invalid port number 0 11:33:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4800000000000000}) 11:33:04 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x10}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000080)={0xa3}) [ 942.593168] vhci_hcd: invalid port number 0 11:33:14 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x4, 0x1, 0x0, 0x4, 0x3, 0x4, 0x7f}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:14 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x98, &(0x7f0000000480)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x9, @local, 0x7}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @rand_addr=0xfffffffffffffffa}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x8000}]}, &(0x7f00000001c0)=0xc) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000240)=""/200, 0xc8, 0x1, 0x6, 0x6f62, 0x3, 0xbbd4}, 0x11c) 11:33:14 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000080)={0xa3}) 11:33:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2000000}) 11:33:14 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7400000000000000}) 11:33:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3}) [ 953.128152] UBIFS error (pid: 8356): cannot open "ubi: [ 953.128152] nbd", error -19 [ 953.129368] vhci_hcd: invalid port number 0 [ 953.140845] UBIFS error (pid: 8356): cannot open "ubi: [ 953.140845] nbd", error -19 [ 953.169831] vhci_hcd: invalid port number 0 11:33:14 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000040)=0xffffffff) 11:33:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x68000000}) 11:33:14 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) [ 953.230880] vhci_hcd: invalid port number 0 11:33:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000080)={0xa3}) 11:33:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x60}) [ 953.292681] vhci_hcd: invalid port number 0 [ 953.311771] FAULT_INJECTION: forcing a failure. [ 953.311771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 953.372956] CPU: 0 PID: 8378 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #184 [ 953.380294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.389658] Call Trace: [ 953.389687] dump_stack+0x1c4/0x2b4 [ 953.389714] ? dump_stack_print_info.cold.2+0x52/0x52 [ 953.401128] ? perf_trace_lock+0x14d/0x7a0 [ 953.401159] should_fail.cold.4+0xa/0x17 [ 953.409444] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 953.414570] ? graph_lock+0x170/0x170 [ 953.418404] ? mark_held_locks+0x130/0x130 [ 953.422748] ? graph_lock+0x170/0x170 [ 953.426563] ? lock_acquire+0x1ed/0x520 [ 953.430566] ? __lock_is_held+0xb5/0x140 [ 953.434666] ? ___might_sleep+0x1ed/0x300 [ 953.438836] ? lock_release+0x970/0x970 [ 953.442837] ? arch_local_save_flags+0x40/0x40 [ 953.447450] ? usbdev_do_ioctl+0x28d/0x3b50 [ 953.451808] ? __might_sleep+0x95/0x190 [ 953.455802] __alloc_pages_nodemask+0x34b/0xde0 [ 953.460489] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 953.465514] ? find_held_lock+0x36/0x1c0 [ 953.469598] ? __might_fault+0x12b/0x1e0 [ 953.473668] ? lock_downgrade+0x900/0x900 [ 953.477835] ? lock_release+0x970/0x970 [ 953.482024] ? arch_local_save_flags+0x40/0x40 [ 953.486620] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 953.491649] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 953.496864] ? usbfs_decrease_memory_usage+0x30/0x30 [ 953.502015] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 953.507569] alloc_pages_current+0x10c/0x210 [ 953.511987] ? check_ctrlrecip+0xa9/0x320 [ 953.516151] __get_free_pages+0xc/0x40 [ 953.520300] proc_control+0x227/0xef0 [ 953.524124] ? zap_class+0x640/0x640 [ 953.527877] ? __lock_acquire+0x7ec/0x4ec0 [ 953.532129] ? proc_bulk+0xa70/0xa70 [ 953.535868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 953.541429] usbdev_do_ioctl+0x1eb8/0x3b50 [ 953.545668] ? processcompl_compat+0x680/0x680 [ 953.550260] ? zap_class+0x640/0x640 [ 953.553978] ? debug_smp_processor_id+0x1c/0x20 [ 953.558652] ? perf_trace_lock+0x14d/0x7a0 [ 953.562877] ? graph_lock+0x170/0x170 [ 953.566664] ? _parse_integer+0x180/0x180 [ 953.570800] ? zap_class+0x640/0x640 [ 953.574511] ? find_held_lock+0x36/0x1c0 [ 953.578563] ? __fget+0x4aa/0x740 [ 953.582017] ? lock_downgrade+0x900/0x900 [ 953.586166] ? check_preemption_disabled+0x48/0x200 [ 953.591174] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 953.597053] ? kasan_check_read+0x11/0x20 [ 953.601185] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 953.606484] ? rcu_bh_qs+0xc0/0xc0 [ 953.610027] ? __fget+0x4d1/0x740 [ 953.613483] ? ksys_dup3+0x680/0x680 [ 953.617187] ? kasan_check_write+0x14/0x20 [ 953.621409] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 953.626338] ? wait_for_completion+0x8a0/0x8a0 [ 953.630945] ? __fget_light+0x2e9/0x430 [ 953.634919] ? fget_raw+0x20/0x20 [ 953.638362] ? __sb_end_write+0xd9/0x110 [ 953.642411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 953.647933] ? fput+0x130/0x1a0 [ 953.651201] ? do_fast_syscall_32+0x150/0xfb2 [ 953.655689] ? do_fast_syscall_32+0x150/0xfb2 [ 953.660195] ? lockdep_hardirqs_on+0x421/0x5c0 [ 953.664765] ? usbdev_do_ioctl+0x3b50/0x3b50 [ 953.669169] usbdev_compat_ioctl+0x24/0x30 [ 953.673396] __ia32_compat_sys_ioctl+0x20e/0x630 [ 953.678148] do_fast_syscall_32+0x34d/0xfb2 [ 953.682590] ? do_int80_syscall_32+0x890/0x890 [ 953.687160] ? entry_SYSENTER_compat+0x68/0x7f [ 953.691729] ? trace_hardirqs_off_caller+0xbb/0x310 [ 953.696738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.701573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.706420] ? trace_hardirqs_on_caller+0x310/0x310 [ 953.711426] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 953.716520] ? prepare_exit_to_usermode+0x291/0x3b0 [ 953.721524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 953.726378] entry_SYSENTER_compat+0x70/0x7f [ 953.730786] RIP: 0023:0xf7effca9 [ 953.734142] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 953.753286] RSP: 002b:00000000f5efb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 953.761015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 953.768269] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.775524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 953.782777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 953.790030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 11:33:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffdda, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socketpair$inet(0x2, 0x3, 0x401, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000300)={0x17000, 0x1000, 0xdaa, 0xa3, 0x80}) 11:33:15 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000040)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:33:15 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x6, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x600000000000000}) 11:33:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000080)={0xa3}) 11:33:15 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000080)={0xa3}) 11:33:15 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) [ 954.047241] UBIFS error (pid: 8405): cannot open "ubi: [ 954.047241] nbd", error -19 [ 954.053525] vhci_hcd: invalid port number 0 11:33:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xa00000000000000}) 11:33:15 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f00000001c0)=0x4) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x6, 0x7}) 11:33:15 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x3a, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 954.133709] UBIFS error (pid: 8419): cannot open "ubi: [ 954.133709] nbd", error -19 [ 954.180048] vhci_hcd: invalid port number 0 11:33:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xa00}) [ 954.252906] UBIFS error (pid: 8430): cannot open "ubi: [ 954.252906] nbd", error -19 [ 954.257318] UBIFS error (pid: 8430): cannot open "ubi: [ 954.257318] nbd", error -19 [ 954.289977] vhci_hcd: invalid port number 0 11:33:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) r2 = memfd_create(&(0x7f0000000200)='wlan1[\x00', 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x81, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000280)=r3) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:16 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:16 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:33:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6}) 11:33:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000080)={0xa3}) 11:33:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c5828, &(0x7f0000000080)={0xa3}) [ 954.968625] UBIFS error (pid: 8449): cannot open "ubi: [ 954.968625] nbd", error -19 [ 954.969495] UBIFS error (pid: 8455): cannot open "ubi: [ 954.969495] nbd", error -19 [ 954.970270] vhci_hcd: invalid port number 0 11:33:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000080)={0xa3}) 11:33:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x800000000000000}) 11:33:16 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x3958, 0x3, 0x1ff, 0x7}) [ 955.048881] vhci_hcd: invalid port number 108 11:33:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x14, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000080)={0xa3}) [ 955.111816] UBIFS error (pid: 8471): cannot open "ubi: [ 955.111816] nbd", error -19 [ 955.113074] UBIFS error (pid: 8471): cannot open "ubi: [ 955.113074] nbd", error -19 [ 955.200637] vhci_hcd: invalid port number 0 11:33:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000003c0)={&(0x7f00000002c0)=""/195, 0xc3, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4) r3 = getpid() write$FUSE_LK(r1, &(0x7f0000000200)={0x28, 0x0, 0x5, {{0x9, 0x7, 0x1, r3}}}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0x3ff, 0x1, 0x7fffffff, {0x0, 0x989680}, 0x8, 0xfffffffffffffc00}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000100000000408001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:17 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0xfffffffffffffffe, &(0x7f0000000000)='adfs\x00') lsetxattr$security_smack_entry(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='security.SMACK64\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) 11:33:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000080)={0xa3}) 11:33:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x100000}) 11:33:17 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000080)={0xa3}) [ 955.857228] vhci_hcd: invalid port number 0 11:33:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4800}) 11:33:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:17 executing program 0: r0 = open(&(0x7f0000000280)='./file0\x00', 0x20000000100, 0x3) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') fcntl$getflags(r0, 0x3) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) fcntl$getflags(r0, 0x40b) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0xffffffffffffffff, 0x1) [ 955.977687] vhci_hcd: invalid port number 0 11:33:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x3000000}) 11:33:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000080)={0xa3}) [ 956.140743] vhci_hcd: invalid port number 0 11:33:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r0, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030008000000efff07001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) 11:33:18 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:18 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') pkey_alloc(0x0, 0x1) 11:33:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000080)={0xa3}) 11:33:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x8000000}) 11:33:18 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7d, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7a}) [ 956.804790] vhci_hcd: invalid port number 0 [ 956.817401] UBIFS error (pid: 8546): cannot open "ubi: [ 956.817401] nbd", error -19 11:33:18 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000080)={0xa3}) [ 956.818617] UBIFS error (pid: 8546): cannot open "ubi: [ 956.818617] nbd", error -19 [ 956.900853] vhci_hcd: invalid port number 0 11:33:18 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000300)) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="7540693a0a6e62820000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x800000, &(0x7f0000000000)='adfs\x00') setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="050204000000000700a41fe49396f9a2b406f8e45550acaedca19bc7b9df0cd61d13f386d87af93cab2971a282e40817f2598ed3f8031acfae027c695ea96e1044744d926e5ce5884c2fff8e3eb2a384ec050f8288288baa15501f6dde6ca1d0925c7f591e31dbf1dc24c521745e4af192ad1cd81abde1bf9b62c4a80c3e67fd1e2a532db099b041d552c1af5ee01b6d8f5f0706a8d946a19e7aec02ec6b0c2ed3a8e20230aa965b24"], 0xae, 0x2) 11:33:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x5000000}) 11:33:18 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 957.030800] UBIFS error (pid: 8564): cannot open "u@i: [ 957.030800] nb‚", error -22 [ 957.043120] UBIFS error (pid: 8566): cannot open "u@i: [ 957.043120] nb‚", error -22 [ 957.081140] vhci_hcd: invalid port number 0 11:33:19 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x14) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000200)={0x3, 0x8}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x1, 0x0) 11:33:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c582a, &(0x7f0000000080)={0xa3}) 11:33:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:19 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040)=0x6, 0x4) pipe2(&(0x7f0000000280), 0x80000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x10000) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0xb) 11:33:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7400}) 11:33:19 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xc, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 957.695040] vhci_hcd: invalid port number 0 11:33:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0xa3}) [ 957.701739] UBIFS error (pid: 8591): cannot open "ubi: [ 957.701739] nbd", error -19 [ 957.719927] UBIFS error (pid: 8591): cannot open "ubi: [ 957.719927] nbd", error -19 11:33:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:19 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '@\x00'}) 11:33:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x4c00000000000000}) 11:33:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000080)={0xa3}) [ 957.870731] UBIFS error (pid: 8609): cannot open "ubi: [ 957.870731] nbd", error -19 [ 957.876685] vhci_hcd: invalid port number 0 11:33:19 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffff0000, 0x2, 0x5}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}, 0x100000001}}, 0x10000, 0xfffffffffffffffe, 0xbe11, 0x3, 0xa0}, &(0x7f0000000100)=0x98) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 957.890215] UBIFS error (pid: 8609): cannot open "ubi: [ 957.890215] nbd", error -19 [ 957.984197] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #163 [ 957.998950] UBIFS error (pid: 8621): cannot open "ubi: [ 957.998950] nbd", error -19 11:33:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"000000bd6800", 0x4820}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xff}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x39}}, 0x10001, 0x5, 0x5, 0x800, 0x2}, &(0x7f00000003c0)=0x98) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x7f000000, @loopback}, 0x1c) pread64(r1, &(0x7f00000001c0)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x380, 0x0) tee(r2, r1, 0x4, 0x0) 11:33:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c5828, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x400000000000000}) 11:33:20 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x3c, 0x40) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 11:33:20 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xd, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0xa3}) [ 958.603408] vhci_hcd: invalid port number 0 11:33:20 executing program 0: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e20}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x7}, 0x8) 11:33:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x7a00000000000000}) 11:33:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000080)={0xa3}) 11:33:20 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000080)={0xa3, 0x6c}) [ 958.783166] vhci_hcd: invalid port number 0 [ 958.790977] UBIFS error (pid: 8656): cannot open "ubi: [ 958.790977] nbd", error -19 11:33:20 executing program 2 (fault-call:14 fault-nth:0): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000080)={0xa3}) 11:33:20 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x40, 0x188) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') 11:33:20 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6000000}) [ 958.792325] UBIFS error (pid: 8656): cannot open "ubi: [ 958.792325] nbd", error -19 11:33:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x50080, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x400}, &(0x7f00000001c0)=0x8) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000200)=@nbd={'ubi:\nnbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ubifs\x00', 0x0, &(0x7f0000000000)='adfs\x00') [ 958.934998] UBIFS error (pid: 8672): cannot open "ubi: [ 958.934998] nbd", error -19 [ 958.991951] vhci_hcd: invalid port number 0 11:33:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000080)={0xa3}) 11:33:20 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x700}) 11:33:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000080)={0xa3, 0x6c}) [ 959.151791] vhci_hcd: invalid port number 0 [ 959.159885] UBIFS error (pid: 8696): cannot open "ubi: [ 959.159885] nbd", error -19 [ 959.164635] UBIFS error (pid: 8701): cannot open "ubi: [ 959.164635] nbd", error -19 [ 959.170808] FAULT_INJECTION: forcing a failure. [ 959.170808] name failslab, interval 1, probability 0, space 0, times 0 [ 959.196442] CPU: 1 PID: 8685 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #184 [ 959.203916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 959.213367] Call Trace: [ 959.215956] dump_stack+0x1c4/0x2b4 [ 959.219575] ? dump_stack_print_info.cold.2+0x52/0x52 [ 959.224755] ? cpu_clock_event_start+0x12c/0x180 [ 959.229505] should_fail.cold.4+0xa/0x17 [ 959.233566] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 959.238743] ? perf_pmu_enable+0xd9/0x120 [ 959.242922] ? event_sched_in.isra.107+0x6bb/0xe40 [ 959.247846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.253372] ? check_preemption_disabled+0x48/0x200 [ 959.258393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.263931] ? perf_pmu_enable+0xd9/0x120 [ 959.268098] ? print_usage_bug+0xc0/0xc0 [ 959.272151] ? event_sched_out.isra.98+0x189/0xdf0 [ 959.277072] ? attach_entity_load_avg+0x860/0x860 [ 959.281908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.287437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 959.292969] ? flexible_sched_in+0x11f/0xc70 [ 959.297367] ? __lock_acquire+0x7ec/0x4ec0 [ 959.301593] ? find_held_lock+0x36/0x1c0 [ 959.305645] __should_failslab+0x124/0x180 [ 959.309892] should_failslab+0x9/0x14 [ 959.313679] kmem_cache_alloc_node+0x56/0x730 [ 959.318186] ? mark_held_locks+0x130/0x130 [ 959.322404] ? perf_event_pid_type+0xf0/0xf0 [ 959.326807] __alloc_skb+0x119/0x770 [ 959.330513] ? skb_scrub_packet+0x490/0x490 [ 959.334839] ? __perf_event_task_sched_in+0x897/0xb60 [ 959.340022] ? lock_downgrade+0x900/0x900 [ 959.344172] ? visit_groups_merge+0x6c0/0x6c0 [ 959.348656] ? kasan_check_read+0x11/0x20 [ 959.352797] ? do_raw_spin_unlock+0xa7/0x2f0 [ 959.357201] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 959.361771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.367296] ? check_preemption_disabled+0x48/0x200 [ 959.372302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.377912] ? check_preemption_disabled+0x48/0x200 [ 959.382918] _sctp_make_chunk+0x58/0x280 [ 959.387070] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 959.392256] sctp_make_heartbeat+0x8f/0x430 [ 959.396569] ? sctp_make_violation_max_retrans+0x70/0x70 [ 959.402010] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 959.407200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.412810] sctp_sf_heartbeat.isra.23+0x26/0x180 [ 959.417644] sctp_sf_do_prm_requestheartbeat+0x27/0x110 [ 959.422994] sctp_do_sm+0x1c1/0x7190 [ 959.426696] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 959.432144] ? sctp_do_8_2_transport_strike.isra.16+0x950/0x950 [ 959.438209] ? print_usage_bug+0xc0/0xc0 [ 959.442260] ? __switch_to_asm+0x34/0x70 [ 959.446305] ? __switch_to_asm+0x40/0x70 [ 959.450357] ? __switch_to_asm+0x34/0x70 [ 959.454431] ? __switch_to_asm+0x40/0x70 [ 959.458478] ? __switch_to_asm+0x34/0x70 [ 959.462524] ? __switch_to_asm+0x40/0x70 [ 959.466569] ? __switch_to_asm+0x34/0x70 [ 959.470613] ? __switch_to_asm+0x34/0x70 [ 959.474665] ? mark_held_locks+0x130/0x130 [ 959.478903] ? __schedule+0x874/0x1ed0 [ 959.482877] ? mark_held_locks+0xc7/0x130 [ 959.487016] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.491765] ? lockdep_hardirqs_on+0x421/0x5c0 [ 959.496368] ? retint_kernel+0x2d/0x2d [ 959.500256] ? trace_hardirqs_on_caller+0xc0/0x310 [ 959.505174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.509918] ? trace_hardirqs_off+0x310/0x310 [ 959.514421] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.519166] ? retint_kernel+0x2d/0x2d [ 959.523045] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 959.528331] sctp_apply_peer_addr_params+0x137/0x2130 [ 959.533550] sctp_setsockopt_peer_addr_params+0x74f/0x820 [ 959.539075] ? sctp_getsockopt_assoc_stats+0x930/0x930 [ 959.544343] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 959.549525] sctp_setsockopt+0x1d96/0x6da0 [ 959.553755] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 959.559453] ? mark_held_locks+0x130/0x130 [ 959.563673] ? __lock_acquire+0x7ec/0x4ec0 [ 959.567899] ? lockdep_hardirqs_on+0x421/0x5c0 [ 959.572467] ? retint_kernel+0x2d/0x2d [ 959.576463] ? __lock_acquire+0x7ec/0x4ec0 [ 959.580683] ? print_usage_bug+0xc0/0xc0 [ 959.584731] ? mark_held_locks+0x130/0x130 [ 959.588958] ? mark_held_locks+0x130/0x130 [ 959.593277] ? trace_hardirqs_off+0x310/0x310 [ 959.597778] ? graph_lock+0x170/0x170 [ 959.601571] ? mark_held_locks+0xc7/0x130 [ 959.605705] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.610453] ? lockdep_hardirqs_on+0x421/0x5c0 [ 959.615023] ? retint_kernel+0x2d/0x2d [ 959.618898] ? trace_hardirqs_on_caller+0xc0/0x310 [ 959.623813] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.628557] ? trace_hardirqs_off+0x310/0x310 [ 959.633046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.638574] ? _parse_integer+0x134/0x180 [ 959.642729] ? print_usage_bug+0xc0/0xc0 [ 959.646783] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.651531] ? graph_lock+0x170/0x170 [ 959.655331] ? graph_lock+0x170/0x170 [ 959.659125] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 959.663869] ? lockdep_hardirqs_on+0x421/0x5c0 [ 959.668450] ? retint_kernel+0x2d/0x2d [ 959.672325] ? find_held_lock+0x36/0x1c0 [ 959.676389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 959.681910] ? aa_label_sk_perm+0x46d/0x8e0 [ 959.686222] ? aa_profile_af_perm+0x410/0x410 [ 959.690709] ? kasan_check_read+0x11/0x20 [ 959.694845] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 959.700125] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 959.705038] ? aa_sk_perm+0x218/0x8b0 [ 959.708825] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 959.713756] ? aa_af_perm+0x5a0/0x5a0 [ 959.717541] ? __lock_is_held+0xb5/0x140 [ 959.721588] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 959.726509] compat_sock_common_setsockopt+0x10c/0x150 [ 959.731778] ? sock_common_setsockopt+0xe0/0xe0 [ 959.736444] __compat_sys_setsockopt+0x1b3/0x860 [ 959.741640] ? __compat_sys_getsockopt+0x8a0/0x8a0 [ 959.746561] ? lockdep_hardirqs_on+0x421/0x5c0 [ 959.751126] ? trace_hardirqs_on+0xbd/0x310 [ 959.755434] ? __ia32_sys_read+0xb0/0xb0 [ 959.759503] ? entry_SYSENTER_compat+0x70/0x7f [ 959.764068] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 959.769516] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 959.774610] do_fast_syscall_32+0x34d/0xfb2 [ 959.778932] ? do_int80_syscall_32+0x890/0x890 [ 959.783513] ? entry_SYSENTER_compat+0x68/0x7f [ 959.788350] ? trace_hardirqs_off_caller+0xbb/0x310 [ 959.793358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.798184] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.803033] ? trace_hardirqs_on_caller+0x310/0x310 [ 959.808037] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 959.813041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 959.818564] ? prepare_exit_to_usermode+0x291/0x3b0 [ 959.823581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 959.828416] entry_SYSENTER_compat+0x70/0x7f [ 959.832819] RIP: 0023:0xf7ff1ca9 [ 959.836178] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 11:33:21 executing program 0 (fault-call:15 fault-nth:0): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 959.855069] RSP: 002b:00000000f5fcc0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 959.862869] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 959.870119] RDX: 0000000000000009 RSI: 00000000200002c0 RDI: 0000000000000098 [ 959.877784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.885140] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 959.892509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 11:33:21 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xa000000}) 11:33:21 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000080)={0xa3}) [ 960.068582] vhci_hcd: invalid port number 0 [ 960.094442] FAULT_INJECTION: forcing a failure. [ 960.094442] name failslab, interval 1, probability 0, space 0, times 0 [ 960.126264] CPU: 1 PID: 8719 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #184 [ 960.133583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 960.142941] Call Trace: [ 960.145539] dump_stack+0x1c4/0x2b4 [ 960.149183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 960.154394] ? cpu_clock_event_start+0x12c/0x180 [ 960.159169] should_fail.cold.4+0xa/0x17 [ 960.163245] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 960.168363] ? perf_pmu_enable+0xd9/0x120 [ 960.172522] ? event_sched_in.isra.107+0x6bb/0xe40 [ 960.177469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.183031] ? check_preemption_disabled+0x48/0x200 [ 960.188077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.193618] ? perf_pmu_enable+0xd9/0x120 [ 960.198003] ? print_usage_bug+0xc0/0xc0 [ 960.202070] ? event_sched_out.isra.98+0x189/0xdf0 [ 960.207002] ? attach_entity_load_avg+0x860/0x860 [ 960.211855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.217401] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 960.223638] ? flexible_sched_in+0x11f/0xc70 [ 960.228060] ? __lock_acquire+0x7ec/0x4ec0 [ 960.232299] ? find_held_lock+0x36/0x1c0 [ 960.236380] __should_failslab+0x124/0x180 [ 960.240622] should_failslab+0x9/0x14 [ 960.244437] kmem_cache_alloc_node+0x56/0x730 [ 960.248942] ? mark_held_locks+0x130/0x130 [ 960.253290] ? perf_event_pid_type+0xf0/0xf0 [ 960.257736] __alloc_skb+0x119/0x770 [ 960.261490] ? skb_scrub_packet+0x490/0x490 [ 960.265833] ? __perf_event_task_sched_in+0x897/0xb60 [ 960.271031] ? lock_downgrade+0x900/0x900 [ 960.275184] ? visit_groups_merge+0x6c0/0x6c0 [ 960.279715] ? kasan_check_read+0x11/0x20 [ 960.283957] ? do_raw_spin_unlock+0xa7/0x2f0 [ 960.288460] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 960.293173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.298723] ? check_preemption_disabled+0x48/0x200 [ 960.303851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.309415] ? check_preemption_disabled+0x48/0x200 [ 960.314436] _sctp_make_chunk+0x58/0x280 [ 960.318507] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 960.323690] sctp_make_heartbeat+0x8f/0x430 [ 960.328001] ? sctp_make_violation_max_retrans+0x70/0x70 [ 960.333460] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 960.338643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 960.344186] sctp_sf_heartbeat.isra.23+0x26/0x180 [ 960.349033] sctp_sf_do_prm_requestheartbeat+0x27/0x110 [ 960.354389] sctp_do_sm+0x1c1/0x7190 [ 960.358197] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 960.363652] ? sctp_do_8_2_transport_strike.isra.16+0x950/0x950 [ 960.369710] ? print_usage_bug+0xc0/0xc0 [ 960.373760] ? __switch_to_asm+0x34/0x70 [ 960.377808] ? __switch_to_asm+0x40/0x70 [ 960.381853] ? __switch_to_asm+0x34/0x70 [ 960.385897] ? __switch_to_asm+0x40/0x70 [ 960.389943] ? __switch_to_asm+0x34/0x70 [ 960.393988] ? __switch_to_asm+0x40/0x70 [ 960.398037] ? __switch_to_asm+0x34/0x70 [ 960.402088] ? __switch_to_asm+0x34/0x70 [ 960.406144] ? mark_held_locks+0x130/0x130 [ 960.410372] ? mark_held_locks+0xc7/0x130 [ 960.414515] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.419264] ? lockdep_hardirqs_on+0x421/0x5c0 [ 960.423841] ? retint_kernel+0x2d/0x2d [ 960.427730] ? trace_hardirqs_on_caller+0xc0/0x310 [ 960.432666] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.437412] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.442154] ? trace_hardirqs_off+0x310/0x310 [ 960.446648] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.451400] ? retint_kernel+0x2d/0x2d [ 960.455305] sctp_primitive_REQUESTHEARTBEAT+0xa0/0xd0 [ 960.460577] sctp_apply_peer_addr_params+0x137/0x2130 [ 960.465776] sctp_setsockopt_peer_addr_params+0x74f/0x820 [ 960.471314] ? sctp_getsockopt_assoc_stats+0x930/0x930 [ 960.476590] ? __local_bh_enable_ip+0x160/0x260 [ 960.481263] sctp_setsockopt+0x1d96/0x6da0 [ 960.485498] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 960.491193] ? mark_held_locks+0x130/0x130 [ 960.495422] ? __lock_acquire+0x7ec/0x4ec0 [ 960.499645] ? lockdep_hardirqs_on+0x421/0x5c0 [ 960.504217] ? retint_kernel+0x2d/0x2d [ 960.508095] ? __lock_acquire+0x7ec/0x4ec0 [ 960.512330] ? mark_held_locks+0x130/0x130 [ 960.516575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.521325] ? mark_held_locks+0x130/0x130 [ 960.525552] ? trace_hardirqs_off+0x310/0x310 [ 960.530037] ? graph_lock+0x170/0x170 [ 960.533838] ? graph_lock+0x170/0x170 [ 960.537644] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.542393] ? mark_held_locks+0xc7/0x130 [ 960.546539] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.551295] ? lockdep_hardirqs_on+0x421/0x5c0 [ 960.555868] ? retint_kernel+0x2d/0x2d [ 960.559743] ? graph_lock+0x170/0x170 [ 960.563540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 960.568303] ? trace_hardirqs_off+0x310/0x310 [ 960.572790] ? _parse_integer+0x180/0x180 [ 960.576921] ? graph_lock+0x170/0x170 [ 960.580701] ? graph_lock+0x170/0x170 [ 960.584499] ? find_held_lock+0x36/0x1c0 [ 960.588646] ? graph_lock+0x170/0x170 [ 960.592460] ? find_held_lock+0x36/0x1c0 [ 960.596525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 960.602050] ? aa_label_sk_perm+0x46d/0x8e0 [ 960.606449] ? aa_profile_af_perm+0x410/0x410 [ 960.610932] ? kasan_check_read+0x11/0x20 [ 960.615068] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 960.620348] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 960.625350] ? aa_sk_perm+0x218/0x8b0 [ 960.629138] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 960.634057] ? aa_af_perm+0x5a0/0x5a0 [ 960.637845] ? __lock_is_held+0xb5/0x140 [ 960.641897] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 960.646836] compat_sock_common_setsockopt+0x10c/0x150 [ 960.652115] ? sock_common_setsockopt+0xe0/0xe0 [ 960.656793] __compat_sys_setsockopt+0x1b3/0x860 [ 960.661542] ? __compat_sys_getsockopt+0x8a0/0x8a0 [ 960.666582] ? lockdep_hardirqs_on+0x421/0x5c0 [ 960.671160] ? trace_hardirqs_on+0xbd/0x310 [ 960.675484] ? __ia32_sys_read+0xb0/0xb0 [ 960.679535] ? entry_SYSENTER_compat+0x70/0x7f [ 960.684103] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 960.689548] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 960.694644] do_fast_syscall_32+0x34d/0xfb2 [ 960.698970] ? do_int80_syscall_32+0x890/0x890 [ 960.703540] ? entry_SYSENTER_compat+0x68/0x7f [ 960.708111] ? trace_hardirqs_off_caller+0xbb/0x310 [ 960.713113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.717941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.722769] ? trace_hardirqs_on_caller+0x310/0x310 [ 960.727781] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 960.732786] ? prepare_exit_to_usermode+0x291/0x3b0 [ 960.738285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 960.743139] entry_SYSENTER_compat+0x70/0x7f [ 960.747539] RIP: 0023:0xf7faaca9 [ 960.750894] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 960.769793] RSP: 002b:00000000f5f850cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 960.777504] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 960.784885] RDX: 0000000000000009 RSI: 00000000200002c0 RDI: 0000000000000098 11:33:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000080)={0xa3}) 11:33:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000080)={0xa3}) 11:33:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000080)={0xa3}) 11:33:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000080)={0xa3, 0x6c}) [ 960.792153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 960.799423] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 960.806676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 11:33:22 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:23 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x14, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6c}) 11:33:23 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:23 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x21, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000080)={0xa3}) [ 961.805745] vhci_hcd: invalid port number 0 [ 961.829050] vhci_hcd: invalid port number 0 11:33:23 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0xa3}) 11:33:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2}) 11:33:23 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x2c0, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:23 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000080)={0xa3, 0x6c}) [ 962.050873] vhci_hcd: invalid port number 0 11:33:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000080)={0xa3}) 11:33:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6c00000000000000}) [ 962.149611] vhci_hcd: invalid port number 108 11:33:23 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 962.208961] vhci_hcd: invalid port number 0 11:33:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)={0xa3}) 11:33:23 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:23 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:23 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x200000000000000}) 11:33:24 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x4, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000080)={0xa3}) [ 962.480285] vhci_hcd: invalid port number 0 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018557a, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000080)={0xa3}) 11:33:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x48000000}) 11:33:24 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x8, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:24 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x23, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000080)={0xa3}) [ 962.712384] vhci_hcd: invalid port number 0 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x8}) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000080)={0xa3}) 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000080)={0xa3, 0x6c}) [ 962.925555] vhci_hcd: invalid port number 0 11:33:24 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x15, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000080)={0xa3}) 11:33:24 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x64, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x74}) 11:33:24 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x24, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 963.135700] vhci_hcd: invalid port number 0 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000080)={0xa3}) 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xffffff7f00000000}) [ 963.281175] vhci_hcd: invalid port number 0 11:33:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000080)={0xa3}) 11:33:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x700000000000000}) [ 963.511299] vhci_hcd: invalid port number 0 11:33:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6e, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x12, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000080)={0xa3}) 11:33:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6000}) [ 963.627075] vhci_hcd: invalid port number 0 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000080)={0xa3}) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x6800000000000000}) 11:33:25 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x1e, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000080)={0xa3}) [ 963.843977] vhci_hcd: invalid port number 0 [ 963.856722] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor3' sets config #163 11:33:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 964.054351] vhci_hcd: invalid port number 0 11:33:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000080)={0xa3}) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x500}) 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000080)={0xa3}) 11:33:25 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0xfffffdfd}) [ 964.299915] vhci_hcd: invalid port number 0 11:33:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x23, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:25 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x300000000000000}) 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0xfdfdffff00000000}) 11:33:26 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x75, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 964.490034] vhci_hcd: invalid port number 0 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0xfdfdffff}) 11:33:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x1000000}) 11:33:26 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0xfdfdffff00000000}) [ 964.671648] vhci_hcd: invalid port number 0 11:33:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 964.717342] vhci_hcd: invalid port number 0 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0xfdfdffff}) [ 964.808106] vhci_hcd: invalid port number 0 11:33:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:26 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:26 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x13, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:26 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x6b, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0xfffffdfd}) 11:33:26 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x78, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 965.176265] vhci_hcd: invalid port number 0 11:33:26 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xfffffdfd}) 11:33:26 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000080)={0xa3, 0x6c}) [ 965.310399] vhci_hcd: invalid port number 0 11:33:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xfdfdffff00000000}) 11:33:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:27 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xc, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 965.665345] vhci_hcd: invalid port number 0 11:33:27 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xd, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018554c, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:27 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x6e, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0xfdfdffff}) 11:33:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 965.851930] vhci_hcd: invalid port number 0 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 966.009027] vhci_hcd: invalid port number 0 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:27 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6e, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 11:33:27 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x10, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:27 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x12, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0xa3, 0x6c}) [ 966.199707] vhci_hcd: invalid port number 0 11:33:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0xfdfdffff}) 11:33:27 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:27 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 966.407959] vhci_hcd: invalid port number 0 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x16, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000080)={0xa3, 0x6c}) [ 966.659263] vhci_hcd: invalid port number 0 11:33:28 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6b, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000080)={0xa3, 0x6c}) [ 966.869249] vhci_hcd: invalid port number 0 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 11:33:28 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000080)={0xa3, 0x6c}) [ 967.020300] vhci_hcd: invalid port number 0 [ 967.059076] vhci_hcd: invalid port number 0 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 11:33:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000080)={0xa3, 0x6c}) [ 967.176964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 967.218196] vhci_hcd: invalid port number 0 [ 967.230879] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 11:33:28 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:28 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x71, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 11:33:29 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x3, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:29 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 967.426382] vhci_hcd: invalid port number 0 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3000000000000000, 0x200107003) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 967.568061] vhci_hcd: invalid port number 0 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x99, @mcast2, 0x149e40}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r1, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xe6, "27c350f0bb74f82f92705097424e6139df01909c0a8ae84d9f7bc076679972615b58e734a41ebb37b1451258497a221717f87fd054e667d10c54b98994f927772b564710ce35bfee5af631b9c477914e2fdc12474183d61d4c6ecfbedb340ed71ed3712e32d87597475872c939daee79d15c1bc9e81ce7ce2babdcaa88ded65f34ba092b01d46fbae59585bcc3f66c5101a1aa9cb72e549b07c9fa5caec3f2857a935912278b18e4b7064a479e54bf15b91fd547cf18eeeb731c0ac8bdb4a377b3e9c01a7198b52d8e9c7a8a15e9ac51fbc5a520689e7620d93d7188f2b30221656b21eef4b6"}, &(0x7f0000000280)=0xee) 11:33:29 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x34, 0x3, 0x0, {0x1, 0x6, 0x0, '\'vmneproc}\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x34) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2}) [ 967.887836] vhci_hcd: invalid port number 0 11:33:29 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:29 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x20000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000100)="73331232affe437dad53010c2bc94d0b285009725756fc9f78a822974d913c63e59ac4dc31eb44c39b4c168d618bd525716fe6a7a648ad78484833ef668e539e01f0cf9ff32198f8295ff9333252ab9749d38f49905e0119a6453a1adbedf12d1783c29e41c6516e2fa75a4833fa1100142a21294b548944b09c5000492b95d283c65bf2edacaa038ff2f765cd4150748bde1cbd3c3ef0542d03adbe1800129f37cf740ec1d08213e92b9cc005809addd1629bd86f0d549dd6d4d80bb5213a4dc90403b4118d44836d2891de82b60ce802a114080dc0f809cb9409133591ad5be129b8911faaa33f80c51dbb", &(0x7f0000000200)=""/4096}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) ptrace$pokeuser(0x6, r1, 0xdd, 0x0) fallocate(r0, 0x11, 0x6, 0xfff) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x8004551a, &(0x7f00000012c0)={0xa3, 0xb, 0x0, 0xb2e9, 0x5c7}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x7f, @rand_addr=0x1, 0x4e20, 0x1, 'wlc\x00', 0x800000a, 0x2e, 0x1c}, 0x3fc) 11:33:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:29 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x18, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:29 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 968.086233] vhci_hcd: invalid port number 0 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000100)="874858d3c1867ce664aaea4df774cb7eb8c606b140a461fbdd043e6fabd9edaeb779c3797cb006414cb575fbd0f2f4bc42dcd139304481210af9307a13a09f5d9dd5616eea55dcdf7c786b4fa64b2def95ee8212e9b58652b0a2092643fb3ddf3d680f6d2727f9bdaf0b90c85322ff5162f945e483659dc21bb176185de631bfd82623001b70153fc446489a7881b1ace56482fd40519371e906d33f91878a0e83bb19e48db63b1282c352e4034bd39d8084c6bc0fe2060d5010e293377e9ca94e0ce54285cb62466a2788342b42ba67f9233536de2a78327a76", 0xda) 11:33:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 968.211222] vhci_hcd: invalid port number 0 11:33:29 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c582a, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:29 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:29 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000000)={0xa3, 0x1}) 11:33:29 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000080)={0xa3, 0x6c}) [ 968.360950] vhci_hcd: invalid port number 0 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x19, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x4, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x3, 0xfffffffffffffffc, 0x8000}) fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)={0x56, 0x9, 0x3f, {0x87, 0x7}, {0x5, 0xeb0}, @period={0x5d, 0x101, 0xfffffffffffffff8, 0x3, 0xf78, {0xfff, 0x8, 0x8, 0x1}, 0x3, &(0x7f0000000000)=[0x6, 0x7, 0x4]}}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x830, {0x1, 0x3, 0x5}, 0x8, r1, r2, 0x9, 0x0, 0x4, 0xffffffffda0765a7, 0x3f, 0x101, 0x5, 0x14, 0x7ff, 0x8001, 0xff, 0x1000000, 0x4, 0x3, 0x4}}, 0xa0) [ 968.544732] vhci_hcd: invalid port number 0 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:33:30 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) [ 968.746979] vhci_hcd: invalid port number 0 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x10000, 0x0) 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 968.923241] vhci_hcd: invalid port number 0 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:30 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x10, &(0x7f0000000200)={&(0x7f0000000000)=""/82, 0x52, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f0000000100)=""/213, 0xd5, r1}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 969.048925] vhci_hcd: invalid port number 0 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001740)={0xa, 0x0, [{0x2, 0x96, &(0x7f0000000100)=""/150}, {0x10000, 0xcb, &(0x7f00000001c0)=""/203}, {0xf004, 0x4b, &(0x7f0000000000)=""/75}, {0x2, 0x25, &(0x7f00000002c0)=""/37}, {0x10f000, 0xc6, &(0x7f0000000300)=""/198}, {0xf000, 0xd6, &(0x7f0000000400)=""/214}, {0x100000, 0xa7, &(0x7f0000000500)=""/167}, {0xf000, 0x5d, &(0x7f00000005c0)=""/93}, {0x100000, 0xe0, &(0x7f0000000640)=""/224}, {0x100000, 0x1000, &(0x7f0000000740)=""/4096}]}) [ 969.240629] vhci_hcd: invalid port number 0 11:33:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:30 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:30 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x3, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x10, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 969.394164] vhci_hcd: invalid port number 0 11:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0xfffffffffffffffe) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) [ 969.603116] vhci_hcd: invalid port number 0 11:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)={0xa3, 0x6c}) 11:33:31 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:31 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)={0xa3}) [ 969.758155] vhci_hcd: invalid port number 0 11:33:31 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:31 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x19, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x6c}) 11:33:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3, 0x0, 0x4, 0x10003}) [ 969.906705] vhci_hcd: invalid port number 0 11:33:31 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7d, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x63}) [ 970.027104] vhci_hcd: invalid port number 0 [ 970.078172] vhci_hcd: invalid port number 99 11:33:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x400) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000100)={0x52e4, 0x0, 0x3, 0x2}) 11:33:31 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:31 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r5 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000440)={r5}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x13, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 970.176463] vhci_hcd: invalid port number 0 11:33:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x5f5e0ff}) [ 970.372963] vhci_hcd: invalid port number 255 11:33:32 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c802fde57c5fbed679bfe2366219ac0580b1e3d4e08c24bc1837ca5ec236ddc38ee56ad82f0003bddf1772d510b2fd361f0"], 0x1}], 0x1, &(0x7f0000000200), 0x0, 0x4890}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x1e, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x8000, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:33:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) 11:33:32 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x0}) 11:33:32 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x75}) 11:33:32 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x64, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 970.590784] vhci_hcd: invalid port number 117 [ 970.596353] vhci_hcd: invalid port number 0 [ 970.601000] ================================================================== [ 970.608717] BUG: KASAN: slab-out-of-bounds in vhci_hub_control+0x1b6d/0x1be0 [ 970.615925] Read of size 4 at addr ffff8801ce39c65c by task syz-executor3/9499 [ 970.623275] [ 970.624894] CPU: 0 PID: 9499 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #184 [ 970.632164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.641519] Call Trace: [ 970.644105] dump_stack+0x1c4/0x2b4 [ 970.647726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 970.652951] ? printk+0xa7/0xcf [ 970.656254] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 970.661019] print_address_description.cold.8+0x9/0x1ff [ 970.666373] kasan_report.cold.9+0x242/0x309 [ 970.670771] ? vhci_hub_control+0x1b6d/0x1be0 [ 970.675260] __asan_report_load4_noabort+0x14/0x20 [ 970.680176] vhci_hub_control+0x1b6d/0x1be0 [ 970.684581] ? vhci_hcd_probe+0x240/0x240 [ 970.688824] ? rcu_read_lock_sched_held+0x108/0x120 [ 970.694781] ? __kmalloc+0x5de/0x760 [ 970.698507] ? kasan_check_write+0x14/0x20 [ 970.702729] ? do_raw_spin_lock+0xc1/0x200 [ 970.706954] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 970.711533] usb_hcd_submit_urb+0x17bb/0x20a0 [ 970.716032] ? vhci_hcd_probe+0x240/0x240 [ 970.720172] ? usb_create_hcd+0x40/0x40 [ 970.724140] ? __ia32_compat_sys_ioctl+0x20e/0x630 [ 970.729057] ? do_fast_syscall_32+0x34d/0xfb2 [ 970.733542] ? entry_SYSENTER_compat+0x70/0x7f [ 970.738111] ? migrate_swap_stop+0x930/0x930 [ 970.742508] ? find_held_lock+0x36/0x1c0 [ 970.746566] ? __lockdep_init_map+0x105/0x590 [ 970.751073] ? __lockdep_init_map+0x105/0x590 [ 970.755566] usb_submit_urb+0x893/0x14e0 [ 970.759640] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 970.764916] usb_start_wait_urb+0x13d/0x370 [ 970.769229] ? sg_clean+0x240/0x240 [ 970.772863] usb_control_msg+0x332/0x4e0 [ 970.776920] ? usb_start_wait_urb+0x370/0x370 [ 970.781407] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 970.786960] proc_control+0x99b/0xef0 [ 970.790756] ? proc_bulk+0xa70/0xa70 [ 970.794468] ? futex_wake+0x304/0x760 [ 970.798280] usbdev_do_ioctl+0x1eb8/0x3b50 [ 970.802510] ? processcompl_compat+0x680/0x680 [ 970.807085] ? mark_held_locks+0x130/0x130 [ 970.811329] ? graph_lock+0x170/0x170 [ 970.815121] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 970.820390] ? rcu_bh_qs+0xc0/0xc0 [ 970.823923] ? rcu_bh_qs+0xc0/0xc0 [ 970.827475] ? unwind_dump+0x190/0x190 [ 970.831359] ? find_held_lock+0x36/0x1c0 [ 970.835413] ? __fget+0x4aa/0x740 [ 970.838858] ? lock_downgrade+0x900/0x900 [ 970.842995] ? check_preemption_disabled+0x48/0x200 [ 970.848006] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 970.853794] ? kasan_check_read+0x11/0x20 [ 970.857934] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 970.863200] ? rcu_bh_qs+0xc0/0xc0 [ 970.866736] ? __fget+0x4d1/0x740 [ 970.870184] ? ksys_dup3+0x680/0x680 [ 970.873889] ? __might_fault+0x12b/0x1e0 [ 970.877986] ? lock_downgrade+0x900/0x900 [ 970.882123] ? lock_release+0x970/0x970 [ 970.886085] ? arch_local_save_flags+0x40/0x40 [ 970.890656] ? posix_ktime_get_ts+0x15/0x20 [ 970.894970] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 970.900854] ? __fget_light+0x2e9/0x430 [ 970.904823] ? fget_raw+0x20/0x20 [ 970.908269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 970.913797] ? compat_put_timespec64+0x110/0x280 [ 970.918562] ? compat_get_timespec64+0x2a0/0x2a0 [ 970.923308] ? do_fast_syscall_32+0x150/0xfb2 [ 970.927803] ? do_fast_syscall_32+0x150/0xfb2 [ 970.932295] ? lockdep_hardirqs_on+0x421/0x5c0 [ 970.936868] ? usbdev_do_ioctl+0x3b50/0x3b50 [ 970.941265] usbdev_compat_ioctl+0x24/0x30 [ 970.945490] __ia32_compat_sys_ioctl+0x20e/0x630 [ 970.950241] do_fast_syscall_32+0x34d/0xfb2 [ 970.954555] ? do_int80_syscall_32+0x890/0x890 [ 970.959132] ? entry_SYSENTER_compat+0x68/0x7f [ 970.963703] ? trace_hardirqs_off_caller+0xbb/0x310 [ 970.968709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.973543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.978377] ? trace_hardirqs_on_caller+0x310/0x310 [ 970.983381] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 970.988475] ? prepare_exit_to_usermode+0x291/0x3b0 [ 970.993521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 970.998474] entry_SYSENTER_compat+0x70/0x7f [ 971.002875] RIP: 0023:0xf7effca9 [ 971.006249] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 971.026347] RSP: 002b:00000000f5efb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 971.034045] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 971.041308] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.048559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.055845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 971.063105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 971.070370] [ 971.071983] Allocated by task 5317: [ 971.075601] save_stack+0x43/0xd0 [ 971.079039] kasan_kmalloc+0xc7/0xe0 [ 971.082742] kasan_slab_alloc+0x12/0x20 [ 971.086704] kmem_cache_alloc+0x12e/0x730 [ 971.090837] vm_area_dup+0x7a/0x230 [ 971.094458] copy_process+0x42a0/0x8780 [ 971.098420] _do_fork+0x1cb/0x11d0 [ 971.101980] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 971.106987] do_fast_syscall_32+0x34d/0xfb2 [ 971.111296] entry_SYSENTER_compat+0x70/0x7f [ 971.115687] [ 971.117299] Freed by task 9433: [ 971.120652] save_stack+0x43/0xd0 [ 971.124089] __kasan_slab_free+0x102/0x150 [ 971.128310] kasan_slab_free+0xe/0x10 [ 971.132111] kmem_cache_free+0x83/0x290 [ 971.136069] vm_area_free+0x1c/0x20 [ 971.139680] remove_vma+0x13a/0x180 [ 971.143293] exit_mmap+0x364/0x590 [ 971.146815] mmput+0x247/0x610 [ 971.150007] do_exit+0xe6f/0x2610 [ 971.153451] do_group_exit+0x177/0x440 [ 971.157326] get_signal+0x8b0/0x1980 [ 971.161131] do_signal+0x9c/0x21e0 [ 971.164663] exit_to_usermode_loop+0x2e5/0x380 [ 971.169234] do_fast_syscall_32+0xcd5/0xfb2 [ 971.173543] entry_SYSENTER_compat+0x70/0x7f [ 971.177933] [ 971.179567] The buggy address belongs to the object at ffff8801ce39c568 [ 971.179567] which belongs to the cache vm_area_struct(33:syz1) of size 200 [ 971.193272] The buggy address is located 44 bytes to the right of [ 971.193272] 200-byte region [ffff8801ce39c568, ffff8801ce39c630) [ 971.205562] The buggy address belongs to the page: [ 971.210488] page:ffffea000738e700 count:1 mapcount:0 mapping:ffff8801bba239c0 index:0x0 [ 971.218629] flags: 0x2fffc0000000100(slab) [ 971.222870] raw: 02fffc0000000100 ffffea0006ee8a08 ffffea0006ebd208 ffff8801bba239c0 [ 971.230743] raw: 0000000000000000 ffff8801ce39c040 000000010000000f ffff8801916523c0 [ 971.238618] page dumped because: kasan: bad access detected [ 971.244398] page->mem_cgroup:ffff8801916523c0 [ 971.248884] [ 971.250515] Memory state around the buggy address: [ 971.255436] ffff8801ce39c500: fb fb fb fb fb fc fc fc fc fc fc fc fc fb fb fb [ 971.262783] ffff8801ce39c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 971.270218] >ffff8801ce39c600: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fb fb [ 971.277559] ^ [ 971.283782] ffff8801ce39c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 971.291140] ffff8801ce39c700: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fb [ 971.298483] ================================================================== [ 971.305823] Disabling lock debugging due to kernel taint [ 971.311255] Kernel panic - not syncing: panic_on_warn set ... [ 971.311255] [ 971.318611] CPU: 0 PID: 9499 Comm: syz-executor3 Tainted: G B 4.19.0-rc7+ #184 [ 971.327258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.336603] Call Trace: [ 971.339179] dump_stack+0x1c4/0x2b4 [ 971.342798] ? dump_stack_print_info.cold.2+0x52/0x52 [ 971.347978] ? lock_downgrade+0x900/0x900 [ 971.352113] panic+0x238/0x4e7 [ 971.355292] ? add_taint.cold.5+0x16/0x16 [ 971.359433] ? add_taint.cold.5+0x5/0x16 [ 971.363484] ? trace_hardirqs_off+0xaf/0x310 [ 971.367993] kasan_end_report+0x47/0x4f [ 971.371970] kasan_report.cold.9+0x76/0x309 [ 971.376454] ? vhci_hub_control+0x1b6d/0x1be0 [ 971.380952] __asan_report_load4_noabort+0x14/0x20 [ 971.385870] vhci_hub_control+0x1b6d/0x1be0 [ 971.390180] ? vhci_hcd_probe+0x240/0x240 [ 971.394433] ? rcu_read_lock_sched_held+0x108/0x120 [ 971.399455] ? __kmalloc+0x5de/0x760 [ 971.403156] ? kasan_check_write+0x14/0x20 [ 971.407395] ? do_raw_spin_lock+0xc1/0x200 [ 971.411632] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 971.416203] usb_hcd_submit_urb+0x17bb/0x20a0 [ 971.420685] ? vhci_hcd_probe+0x240/0x240 [ 971.424823] ? usb_create_hcd+0x40/0x40 [ 971.428827] ? __ia32_compat_sys_ioctl+0x20e/0x630 [ 971.433758] ? do_fast_syscall_32+0x34d/0xfb2 [ 971.438239] ? entry_SYSENTER_compat+0x70/0x7f [ 971.442808] ? migrate_swap_stop+0x930/0x930 [ 971.447206] ? find_held_lock+0x36/0x1c0 [ 971.451258] ? __lockdep_init_map+0x105/0x590 [ 971.455742] ? __lockdep_init_map+0x105/0x590 [ 971.460227] usb_submit_urb+0x893/0x14e0 [ 971.464282] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 971.469561] usb_start_wait_urb+0x13d/0x370 [ 971.473891] ? sg_clean+0x240/0x240 [ 971.477517] usb_control_msg+0x332/0x4e0 [ 971.481601] ? usb_start_wait_urb+0x370/0x370 [ 971.486085] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 971.491618] proc_control+0x99b/0xef0 [ 971.495437] ? proc_bulk+0xa70/0xa70 [ 971.499136] ? futex_wake+0x304/0x760 [ 971.502927] usbdev_do_ioctl+0x1eb8/0x3b50 [ 971.507250] ? processcompl_compat+0x680/0x680 [ 971.511826] ? mark_held_locks+0x130/0x130 [ 971.516044] ? graph_lock+0x170/0x170 [ 971.519834] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 971.525097] ? rcu_bh_qs+0xc0/0xc0 [ 971.528625] ? rcu_bh_qs+0xc0/0xc0 [ 971.532153] ? unwind_dump+0x190/0x190 [ 971.536039] ? find_held_lock+0x36/0x1c0 [ 971.540087] ? __fget+0x4aa/0x740 [ 971.543530] ? lock_downgrade+0x900/0x900 [ 971.547667] ? check_preemption_disabled+0x48/0x200 [ 971.552672] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 971.558463] ? kasan_check_read+0x11/0x20 [ 971.562598] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 971.567864] ? rcu_bh_qs+0xc0/0xc0 [ 971.571405] ? __fget+0x4d1/0x740 [ 971.574889] ? ksys_dup3+0x680/0x680 [ 971.578591] ? __might_fault+0x12b/0x1e0 [ 971.582638] ? lock_downgrade+0x900/0x900 [ 971.586779] ? lock_release+0x970/0x970 [ 971.590775] ? arch_local_save_flags+0x40/0x40 [ 971.595344] ? posix_ktime_get_ts+0x15/0x20 [ 971.599750] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 971.605204] ? __fget_light+0x2e9/0x430 [ 971.609165] ? fget_raw+0x20/0x20 [ 971.612626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.618148] ? compat_put_timespec64+0x110/0x280 [ 971.622892] ? compat_get_timespec64+0x2a0/0x2a0 [ 971.627639] ? do_fast_syscall_32+0x150/0xfb2 [ 971.632230] ? do_fast_syscall_32+0x150/0xfb2 [ 971.636708] ? lockdep_hardirqs_on+0x421/0x5c0 [ 971.641275] ? usbdev_do_ioctl+0x3b50/0x3b50 [ 971.645753] usbdev_compat_ioctl+0x24/0x30 [ 971.649975] __ia32_compat_sys_ioctl+0x20e/0x630 [ 971.654718] do_fast_syscall_32+0x34d/0xfb2 [ 971.659041] ? do_int80_syscall_32+0x890/0x890 [ 971.663620] ? entry_SYSENTER_compat+0x68/0x7f [ 971.668194] ? trace_hardirqs_off_caller+0xbb/0x310 [ 971.673195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.678027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.682873] ? trace_hardirqs_on_caller+0x310/0x310 [ 971.687875] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 971.692881] ? prepare_exit_to_usermode+0x291/0x3b0 [ 971.697888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 971.702719] entry_SYSENTER_compat+0x70/0x7f [ 971.707111] RIP: 0023:0xf7effca9 [ 971.710497] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 971.729467] RSP: 002b:00000000f5efb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 971.737159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185500 [ 971.744412] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.751662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.758927] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 971.766193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.961905] Shutting down cpus with NMI [ 972.967417] Kernel Offset: disabled [ 972.971130] Rebooting in 86400 seconds..